4. When auditing a private company, the auditor should obtain an understanding of internal control sufficient to: Select one:

A. Assess control risk.

B. Provide reasonable protection against client fraud and defalcations by client employees.

C. Provide a method for safeguarding assets, checking the accuracy and reliability of accounting data, promoting operational efficiency, and encouraging adherence to prescribed managerial policies.

D. Provide a basis for suggestions to the client for improving the accounting system.