Need Help in resolving answers that has a ? question mark as scroll down the page:

	BFF Payroll Audit
	Risk & Control Matrix
Note: For this assignmetn, you'll need to assume that at least 1 risk is inadequately designed)
Control Activity	Key (Y/N)	Design Adequacy evaluation	TOE Approach
Control activity A (Example: Employees sign own timesheets attesting to its accuracy).	Y	(Example: The indicated key control activities are adequate to manage this risk to an acceptable level)	Test A & B (Select a population of .)
Control activity B (per assumptions)	?
Control activity A (per assumptions)	?	(Example: The indicated key control activities are NOT adequate to manage this risk to an acceptable level; And, discuss why there is a design gap).	TBD
Control activity B (per assumptions)	?
Control activity C (per assumptions)	?
TBD	?	TBD	TBD