In each of the following three new audit engagements for a medium-sized client, assume

that sufficient appropriate evidence was accumulated for its revenue process.

Audit 1: The client does not implement strict policies on segregation of duties due to lack of

staff, and it has many complex sales transactions.

Audit 2: The client implemented an integrated enterprise management system, and it has a

few large customers.

Audit 3: The auditor initially assessed CR as 40%, but in performing the test of control, the

auditor found more than 30% of sales without appropriate authorisation.

Based on your risk assessments, discuss and compare the overall audit strategy for the

three audits. Your discussion needs to cover the nature, timing and extent of performing

tests of controls and substantive tests.