Lastly, auditors should be encouraged to use
the work of others. In order to comply with
Sarbanes Oxley auditor independence rules,
CTI’s auditor carried out tests for each of the
key controls identified by CTI, and did not rely
on the self-assessment of the control owners or
the facilitator tests. This is not in line with AS-
2, which clearly describes three categories of
controls and the extent to which the auditor
can rely on the work of others in each of these
categories.