Which of the following statements is correct concerning an auditor’s assessment of control risk?

(A) Assessing control risk may be performed concurrently during an audit with obtaining an understanding of the entity’s internal control.

(B) Evidence about the operation of internal control in prior audits may not be considered during the current year’s assessment of control risk.

(C) The basis for an auditor’s conclusions about the assessed level of control risk need not be documented unless control risk is assessed at the maximum.

(D) The lower the assessed level of control risk, the less assurance the evidence must provide that the control procedures are operating effectively.