CPA Discipline — BAR / ISC / TCP

A payroll service organization processes wage and tax withholding data that its customers use in their financial statements. A user auditor wants assurance over controls affecting payroll expense and payroll liabilities. Which report is most likely appropriate?