Sami Zubair's client does not have in place appropriate controls for a risk he has identified. What should Sami do?
A) conduct few or no tests of controls
B) report the weaknesses to those charged with governance
C) increase his reliance on substantive tests
D) all of the above

Question

Quizplus · Accepted Answer

Sami should report the weaknesses to those charged with governance, conduct fewer tests of controls since they are not appropriate or effective, and increase his reliance on substantive tests to gain assurance. All these actions are appropriate responses to the identified risk.

Sami Zubair's Client Does Not Have in Place Appropriate Controls