$20.$ Zain Hakim's client does not have in place appropriate controls for a risk he has identified. What should Zain do$?$

a$.$ conduct few or no tests of controls

b$.$ report the weaknesses to those charged with governance

c$.$ increase his reliance on substantive tests

d$.$ all of the answers are correct