If controls over systems development and maintenance are weak, however, the auditor
may decide that testing data editing controls will be more efficient than performing
extensive substantive tests of details. In such a case, ITF or the test data approach can
enable the auditor to perform explicit tests of the validation logic.