When she chose, however, her face could be sphinxlike in its inscrutability.
She could be mysterious when she wanted to be.
If auditors obtain sufficient evidence of the effectiveness of these controls, they can reduce the extent of their tests of compliance.