Artículo 8. Control Environment

.23 The auditor should obtain an understanding of the company's control environment, including the policies and actions of management, the board, and the audit committee concerning the company's control environment. .24 Obtaining an understanding of the control environment includes assessing: Whether management's philosophy and operating style promote effective internal control over financial reporting; Whether sound integrity and ethical values, particularly of top management, are developed and understood; and Whether the board or audit committee understands and exercises oversight responsibility over financial reporting and internal control. Note: In an audit of financial statements only, this assessment may be based on the evidence obtained in understanding the control environment, in accordance with paragraph .23, and the other relevant knowledge possessed by the auditor. In an integrated audit of financial statements and internal control over financial reporting, AS 2201 14 describes the auditor's responsibility for evaluating the control environment. Whether the board or audit committee understands and exercises oversight responsibility over financial reporting and internal control. Note: In an audit of financial statements only, this assessment may be based on the evidence obtained in understanding the control environment, in accordance with paragraph .23, and the other relevant knowledge possessed by the auditor. In an integrated audit of financial statements and internal control over financial reporting, AS 2201 14 describes the auditor's responsibility for evaluating the control environment. .25 If the auditor identifies a control deficiency 15 in the company's control environment, the auditor should evaluate the extent to which this control deficiency is indicative of a fraud risk factor, as discussed in paragraphs .65-.66 of this standard.