If the auditor plans to assess control risk at less than the maximum and rely on controls, and the nature, timing, and extent of further audit procedures are based on that lower assessment, the auditor must
a. Obtain evidence that the controls selected for testing are designed effectively and operated effectively during the entire period of reliance.
b. Assess control risk at less than the maximum for all relevant assertions.
c. Perform only substantive procedures.
d. Provide additional examples of responses to assessed fraud risks relating to fraudulent financial reporting.