The possible risk assertions are existence, completeness, valuation, rights and obligations, and presentation of disclosure. What category does the following concern fall into, "Since the company uses direct deposit, who keys the bank account numbers into the payroll system? Who can change those numbers?"