If an auditor’s preliminary evaluation of internal controls results in an observation that controls may be inadequate, the next step would be to:
a. Expand audit work before the preparation of a final engagement communication.
b. Prepare a flowchart depicting the internal control system.
c. Note an exception in the engagement final communication if losses have occurred.
d. Implement the desired controls.