After obtaining an understanding of an entity's internal controls and assessing control risk, an auditor may next:

a. Perform tests of controls to verify management's assertions that are embodied in the financial statements.

b. Consider whether to reduce the assessed level of control risk further.

c. Discontinue searching for reportable conditions.

d. Evaluate whether control activities can detect material misstatements.

Choose the correct answer.