Response to the following questions:
1. Why does the "audit testing hierarchy" begin with tests of controls and substantive analytical procedures?
2. Consider the "assurance bucket" analogy. Why are some of the buckets larger than others for particular assertions or accounts?
If possible, please give examples to better understand your answers.