tests of controls, substantive procedures and walk-through tests