Watch this video on YouTube
What is the BEST approach for identifying deficiencies in information systems controls?