regardless of the assessed level of control risk and auditor of a non-public company would perform some: a. tests of controls to determine the effectiveness of internal control policies b. analytical procedures to verify the design of internal control activities c. substantive tests tell restrict detection risk for significant transaction classes d. dual purpose tests to evaluate the the risk of monetary misstatement and preliminary control Brusque