If a companys control risk is initially assessed as low, the auditor needs to gather evidence on the operating effectiveness of the controls. For each of the following control activities listed as (1)(10), do the following two tasks:

a. Describe the test of control that the auditor would use to determine the operating effectiveness of the control.

b. Briefly describe how substantive tests of account balances should be modified if the auditor finds that the control is not working as planned. In doing so, indicate (a) what misstatement could occur because of the control deficiency, and (b) how the auditors substantive tests should be expanded to test for the potential misstatement.

8. Edit tests built into the computerized payroll program prohibit the processing of weekly payroll hours in excess of fifty-three and prohibit the payment to an employee for more than three different job classifications during a one-week period.

A)

B)