Auditors typically rely on internal controls of their private company clients

A. only as needed to complete the audit and satisfy Sarbanesminus Oxley requirements.

B. only if the controls are sufficient to increase control risk to an acceptable level.

C. only if the client asks an auditor to test controls.

D. only if the controls are determined to be effective.