Stichworte: what factors do auditors consider when determining if an identified control deficiency is