Regardless of the assessed level of control risk, an auditor would perform some

a. Tests of controls to determine the effectiveness of internal controls.

b. Analytical procedures to verify the design of internal controls.

c. Substantive procedures to restrict detection risk for significant transaction classes.

d. Dual-purpose tests to evaluate both the risk of monetary misstatement and preliminary control risk.