Final answer:
If an effective compensating control does not exist or is not functioning as designed, the auditor revises the overall audit risk assessment and planned audit strategy.
Step-by-step explanation:
If the auditor determines that an effective compensating control does not exist, or tests of controls show that the compensating control is not functioning as designed, the auditor revises the overall audit risk assessment for the related account and assertion, and the planned audit strategy.