A compliance officer reviews a control testing workpaper and notices the tester documented 'no exceptions found' but did not retain evidence of the sample reviewed. What is the main deficiency?
-
A
The control was over-tested
-
B
The test conclusion is not supportable without evidence of work performed
-
C
The sample size was too large
-
D
The conclusion should always note at least one exception