21. In obtaining an understanding of an entity's risk assessment process component of internal control, an auditor should evaluate whether the entity has a process for a. b. C. d. Identifying business...