Paragraph 85 of Auditing Standard No. 2 elaborates on this idea, including the example that, when performing tests of preventive and detective controls, the auditor might conclude that a deficient preventive control could be compensated for by an effective detective control and, therefore, not result in a significant deficiency or material weakness.