What is meant by auditing around the computer and why does this increase audit risk?

An auditor is required to obtain a sufficient understanding of each of the components of an

entity's system of internal control to plan the audit of the entity's financial statements and to assess

control risk for the assertions embodied in the account balance, transaction class and disclosure

components of the financial statements.

Required

(a) Explain the reasons an auditor may assess control risk at the maximum level for one or more

assertions embodied in an account balance.

(b) What must an auditor do to support assessing control risk at less than high when the auditor has

determined that controls have been placed in operation?a