In testing control activities, an auditor ordinarily selects from a variety of techniques