Julia is in the process of auditing the legal liability section of the financial statements. The controller indicated that he did not want her to contact their external lawyers and he is refusing to grant her access to the detail of the legal expense for the year and any legal invoices.

What should Julia do in this situation? Indicate the steps, in the proper order, that should be taken.