This includes compensating controls that operate at a level of precision that would prevent or detect a misstatement of the reporting package that could be material.
Compensating controls are not considered when determining whether a deficiency exists. Rather, compensating controls are considered when evaluating the severity of a deficiency. Therefore, the existence of compensating controls does not affect your determination as to whether a deficiency exists. When relying on a compensating control to limit the severity of an identified deficiency, you should evaluate the design and operating effectiveness.