Documenting internal controls: 

(a) Is always handled through the use of checklists and preformatted questionnaires. 

(b) Is done after internal controls are tested so that the results can be included in the documentation. 

(c) Can be handled with a combination of narratives and flowcharts. 

(d) Is not done for smaller clients because of the risk of management override.