An audit strategy can take _______.

neither a reliance on controls approach, nor a substantive approach

an approach whereby only internal control is audited

a reliance on controls approach, a substantive approach, or a combination of both

a reliance on procedures approach, a substantive approach, or a combination of both