If the financial reporting risks for a location are low and the entity has good entity-level controls, management may rely on which of the follow- ing for their assessment.

a. Documentation and test controls over specific risks.

b. Self-assessment processes in conjunction with entity-level controls.

c. Documentation and test entity-level controls over the entire entity.

d. Selective control test at that location.