After auditors have assessed control risk O they are in a good position to evaluate the risk of fraud. O the findings should be referred to the internal audit function for investigation. O the findings should be submitted to management for review and approval. O the audit is ready to be finalized and the audit opinion issued