Is it possible to assess inherent risk at zero and perform only a minimal amount of detection (audit) work? Why or why not? Is it possible to assess control risk at zero and perform only a minimal amount of detection (audit) work? Why or why not? Would you be able to assess RMM as high and perform an extensive amount of substantive audit work? Why or why not