If the auditor assesses control risk at less than maximum, then he needs to perform tests of control to support that reliance.
In this lecture , we will continue our discussion of how an auditor justifies their reliance on internal controls by testing them.