The auditor should consider whether any controls tend to compensate for the identified deficiency. A compensating control is one that limits the severity of a control deficiency and may prevent it from being identified as a significant deficiency or material weakness.
a) Compensating controls are not relevant
b) Compensating controls are always effective
c) Compensating controls can prevent identification
d) Compensating controls worsen deficiencies
