2) When assessing the risk of material misstatements in the financial statements, A) company management is responsible for determining materiality levels. B) the auditor must understand the client's business and industry*. C) GAAS specifies in detail how much and what types of evidence the auditor needs to obtain. D) inadequate internal control procedures will mitigate client business risk