In evaluating the operating effectiveness of controls, the auditor's objective is to:

Obtain an understanding of controls relevant to the audit.

Determine whether the controls relevant to the audit exist.

Evaluate the design of the controls and whether they were properly implemented.

Evaluate whether the controls met their objective throughout the reporting period.