3. Audit work has been planned on the basis that internal controls are expected to be effective. However, the planned tests of controls show that this is not, in fact, the case and the controls I cannot be relied on. Required: Which TWO actions, taken together, constitute the appropriate audit response?