Which of the following statements best describes why an auditor would use only substantive procedures to evaluate specific relevant assertion and risks?

a. The relevant internal control components are not well documented.

b. The internal auditor already has tested the relevant controls and found them effective.

c. Testing the operating effectiveness of the relevant controls would not be efficient.

d. The cost of substantive procedures will exceed the cost of testing the relevant controls.