option c and d are incorrect

Renee and Bruce are discussing the best way to audit one of their clients IT application controls. Different ideas have been discussed, but neither Renee nor Bruce is sure which would be most effective. They approach you, their supervisor, for suggestions on how to test this. Which of the following suggestions would be the most viable? Generally accepted auditing standards do not require the external auditors to test the client's IT application controls. This falls under the purview of the internal audit function. Consider entering fictitious 'test' data into the client's system to ensure that the related controls are functioning properly. and appropriately flag or don't flag transactions. Consider retaining the services of a specialist IT firm to audit all IT related controls. The costs associated with these specialists can be billed directly to the client. None of these answer choices are correct