Violations of these rules may indicate fraud, malpractice, risks, and inefficiencies.
Traditionally, auditors can only provide reasonable assurance that business processes are executed within the given set of boundaries. They check the operating
effectiveness of controls that are designed to ensure reliable processing. When these
controls are not in place, or otherwise not functioning as expected, they typically
only check samples of factual data, often in the “paper world”.