35. Moises has reviewed internal controls at a spring training facility in Florida and has deemed control risk to be high. Which kind of audit strategy may be appropriate for Moises? a) combined audit strategy b) substantive audit strategy c) a and b d) none of the above