last chapter, this often involves a combination of tests of controls and substantive tests of
details. The specific controls addressed here are based on the application controls framework
presented in Chapter 7, which classifies controls into three broad categories: input
controls, process controls, and output controls. Within this framework, we examine
application controls, tests of controls, and the audit objectives to which they relate.
Substantive tests and their relationship to management assertions and corresponding
audit objectives are considered later in the chapter.