execute and document testing of client controls (including IT, security, programming and governance controls) and financial statement account balances using appropriate standards and terminology; identify potential misstatements and control deficiencies, escalating matters