If an auditor discovers a control deficiency, which steps must they take first? O Perform tests of controls other than those related to the same assertion with the control deemed to be ineffective O Evaluate the level of severity of the deficiency on the auditor's assessment of control risk for the related assertion O Modify the substantive procedures planned to due to the deficiency O Perform Tests of the deficient control with the assumption of a maximum level of risk