Consider the following two statements: Evaluating the adequacy of control design is necessary but not sufficient if the objective of an assurance engagement is to reach a conclusion regarding the overall effectiveness of controls. If an internal auditor determines that a control is inadequately designed, there is no good reason to test the operating effectiveness of the control. Do you agree with each of these statements? Explain.