Understanding Internal Controls A10-101x

Give two reasons, why an auditor would assess control risk at the maximum level.

1. Controls are considered ineffective.
2. The substantive audit approach is better. Reliance on internal controls would be inefficient.