The ultimate purpose of assessing control risk is to contribute to the auditor's evaluation of the risk that
Entity policies may be inappropriately overridden by senior management.
Specified controls requiring segregation of duties may be circumvented by collusion.
Tests of controls may fail to identify procedures relevant to assertions.
Material misstatements may exist in the financial statements