The first-year auditor on the engagement has suggested that since no exceptions were detected in previous years, no work on internal controls is required because last years evidence will be sufficient.

Explain why the first-year auditors suggestion may or may not be appropriate and outline what work is required.