After assessing control risk, an auditor desires to seek a further reduction in the assessed level of control risk. At this time, the auditor would consider whether

a. It would be efficient to obtain an understanding of the entity’s information system.

b. The entity’s controls have been implemented.

c. The entity’s controls pertain to any financial statement assertions.

d. Additional audit evidence sufficient to support a further reduction is likely to be available.