When the Auditor Has Assessed the Level of Control Risk

Multiple Choice

When the auditor has assessed the level of control risk at less than high, the auditor should document:

A) the understanding of the entity's internal control elements obtained to plan the audit.
B) the conclusion and the basis for that conclusion.
C) the implications for the overall audit strategy.
D) All of the given answers are correct.