Understand controls established by management to control risk
Determine controls have been implemented
Respond to risk
Has overall effect on audit
Design of audit procedures
Performing procedures to address risk of material misstatement due to management override of internal control