The second gaas field work standard states the auditor must obtain a sufficient understanding of the entity and its environment, including its internal controls, to assess the risk of material misstatement of the financial statements whether due to error or fraud and to design the nature, timing, and extent of further audit procedures. the auditor obtains the understanding of internal control to assess control risk in every audit and that responsibility is the same for audits of both public and non-public companies. auditors are primarily concerned about controls related to the reliability of financial reporting and controls over classes of tranactions. (lo #10-2, 10-4, 10-8)