Evaluation: Evaluate internal control deficiencies to determine potential impact on the nature, timing, and extent of audit procedures.