text: The auditors ' assessment of risk includes consideration of whether the entity has controls that are effective in preventing or detecting noncompliance .
  
  ###
  
  The auditor never completed their assessment regarding controls and noncompliance .