This is where you're relying on IT computer controls to make sure that once something has been entered into the system, it's functioning properly. That's why we raised concerns around access issues linked to IT general computer controls. Many of those statutory payments have a low dollar value and are high-volume.
There are some where there would be a separate transfer payment agreement. Then it is to make sure that when it's first put into the system, it's put in correctly.
I think there are two controls—that initial one and then the ongoing IT computer control. That's where your greatest risk would lie, from an audit perspective.
