AU-C 560 and AS 2905 state the first step when responding to subsequently discovered facts is to O issue a disclaimer of opinion, to avoid liability O immediately notify the board of directors, and request the internal audit function investigate accordingly O discuss the matter with the appropriate level of management and, if appropriate, those charged with governance O discuss the matter with the appropriate level of management rather than those charged with governance