True or False?

1. If the auditor believes internal controls are completely ineffective to prevent or detect misstatements, the auditor should assess control risk as high.

2. Inherent risk and control normally vary for different accounts in the same audit, whereas acceptable audit risk is ordinarily held constant for each account in the same audit.