In making those risk assessments, the auditor considers internal control relevant to the consolidated entity’s preparation and fair presentation of the financial report in order to design audit procedures that are appropriate in the circumstances, but not for the purpose of expressing an opinion on the effectiveness of the entity’s internal control.