If we are unable to obtain a sufficient understanding of the nature and significance of the services provided by the service organization and their effect on the user entity’s internal control relevant to the audit to provide a basis for the identification and assessment of risks of material misstatement from the user entity, we shall obtain that understanding from one or more of the following procedures: [Source: ISA 402.12]