Auditors should not solely rely on internal controls; they must perform substantive testing such as physical inventory counts and price verification.