If all of a company’s ITGC are effective except its contingency controls, would the auditor be able to conclude that the ICFR is effective? What if other controls are lacking but contingency controls are effective? How would the auditor modify plans for the financial statement audit if the conclusion in the ICFR audit is that many general controls are lacking but contingency controls are consistently effective?