Question:
Provide an example of a situation in which the "design of controls" may be effective but those controls do not operate "effectively". In other words, what issues could cause these controls to be ineffective, such as situations in which the controls are circumvented, or ignored?