Why do auditors have to consider the internal controls of the organization? What are some key elements of internal control? Which are the most important? How will the auditor have to modify the audit program if the internal controls are deemed inadequate to support management assertions?