Management's report on internal controls must include each of the following except: a statement providing management's evaluation of the company's control environment. a statement identifying the framework management uses to evaluate the effectiveness of the company's internal control. a statement that management is responsible for establishing and maintaining adequate internal control over financial reporting, O a statement providing management's assessment of the effectiveness of the company's internal control In practice, auditors rarely assign numerical probabilities to inherent risk, control risk, or acceptable audit risk. it is more common to assess these risks as high, medium, or low. For each of the four situations below, fill in the blanks for planned detection risk and the amount of evidence you would plan to gather ("planned evidence") using the terms high, medium, or low. SITUATION Low Low Audit risk Low Inherent risk High Low Control risk High Select) Select 1 Detection risk Select Select ! Planned evidence [Select] Select Hgh Med Low