For example, after reviewing systems development and maintenance controls, the auditor may determine that controls over original program designand testing and subsequent changes to programs are effective. This evidence permits
the auditor to assess the risk of material program errors at a low level and thus reduce the substantive tests related to the audit objective of accuracy.