The purpose of obtaining an understanding of internal control is to find out how the

client

auditor

banker

client

controller

believes internal control operates. Assessing control risk means to state the degree to which the

controller

intends to depend on internal control to reduce substantive procedures.