Assessment of control risk and testing of internal controls are the most important parts of the audit