An auditor's documentation of the client's system of internal controls O is the client's responsibility, and should be provided to the auditor by the client should be jointly drafted by the auditor and the client should always be written and updated regularly as the auditor gains further understanding should be retained in the permanent audit file and never shared with the client