Decide which of the following will likely be done under both a reducing control risk approach and a substantive approach 

1. Assess inherent risk 

2. Obtain an understanding of internal control 

3. Perform tests of control 

4. Perform analytical procedures 

5. Assess planned detection risk