I am self-studying F8 and very confused when outline the answer for these 2 types of questions: audit risk and control deficiency As I see, the answers are usually formatted as follows: – first you identify the risks/deficiencies, and explain/describe them. – then, you have to give audit’s responses/make recommendations. So, the meaning behind the two questions is the same? Please help me to clarify this. Thanks.