When auditors evaluate the system of internal control, they need to evaluate whether the identified controls adequately address the risks of material misstatement due to fraud. Indeed, because of their sensitive nature, the standard explicitly mentions controls related to “significant, unusual transactions, particularly those that result in late or unusual journal entries.”