The auditors ' assessment of risk includes consideration of whether the entity has controls that are effective in preventing or detecting noncompliance .
The auditor 's assessment explains the controls that are effective in dealing with noncompliance .