Generally accepted auditing standards $($GAAS$)$ give auditors considerable discretion to decide the amount of work required to satisfy auditing standards guiding internal control evaluation and related audit planning. Which of the descriptions below best expresses the minimum amount of work permitted by GAAS for nonissuers?

Multiple Choice

Do not obtain an understanding of client environment, accounting, or control activities. Do not document the decision to assess control risk at maximum. Perform $100\%$ substantive audit on all financial statement transactions and balances.

Obtain an understanding of client environment, accounting, and control activities. Document the decision to assess control risk at maximum. Perform an extensive but not $100\%$ substantive audit on financial statement transactions and balances.

Obtain an understanding of client environment, accounting, and control activities, and perform detailed tests of controls. Document the decision to assess control risk below the maximum. Perform restricted substantive audit on financial statement transactions and balances, considering the control risk assessment.