As a result of sampling procedures applied as tests of controls, an auditor incorrectly assesses control risk lower than appropriate. The most likely explanation for this situation is that

a. The deviation rates of both the auditor's sample and the population ex- ceed the tolerable deviation rate.

b. The deviation rates of both the auditor's sample and the population are less than the tolerable deviation rate. lop85