Which of the following should be considered by the auditor when designing and performing?