Current Attempt in Progress If control risk is high or maximum, and there are no compensating controls, the auditor should O consider withdrawing from the engagement. O assume that fraud risk is low, and design appropriate substantive tests, particularly substantive tests of transactions. request additional written representation from management. O assume that fraud risk is high, and design appropriate substantive tests, particularly substantive tests of transactions