The first-year auditor on the engagement has suggested that since no exceptions were detected in previous years, no work on internal controls is required because last years evidence will be sufficient.

-Explain why the first-year auditors suggestion may or may not be appropriate and outline what work is required.

-Explain the concept of benchmarking. Why is it appropriate for an auditor to use a benchmarking audit strategy that uses information from tests of controls performed in prior years?