ISA 520 Analytical procedures
... The auditor may consider testing the operating effectiveness of controls, if any, over
the entity’s preparation of information used by the auditor in performing substantive
analytical procedures in response to assessed risks. When such controls are effective,
the auditor generally has greater confid ...