In determining the assessed level of control risk for an entity, an auditor must assess control risk as high when he or she has:

(a) found no significant deficiencies in the internal control system.

(b) decided on a high level of detection risk.

(c) decided not to test the internal control system.

(d) assessed inherent risk to be high.

Choose the best answer.