sentence1: The auditors' assessment of risk includes consideration of whether the entity has controls that are effective in preventing or detecting noncompliance.
sentence2: Noncompliance is an important issue that the auditor helps deal with.