Assessing Control Risk and Designing Tests of Controls Evaluating client controls and testing their operational effectiveness