Achieving these audit objectives requires designing audit procedures to gather evidence that either corroborates or refutes the management assertions. Generally, this process involves a combination of tests of controls and substantive tests of details. The specific controls we address here are based on the more-extensive discussion of application controls issues contained in Chapter 7.