The first-year auditor on the engagement has suggested that since no exceptions were detected in previous years, no work on internal controls is required because last years evidence will be sufficient.

Explain the concept of benchmarking. Why is it appropriate for an auditor to use a benchmarking audit strategy that uses information from tests of controls performed in prior years?