What may the auditor do to reduce inherent risk below maximum?

Increase the extent of substantive testing.

Alter the nature and timing of substantive testing.

Test the operating effectiveness of controls.

Nothing, because inherent risk cannot be reduced by the auditor.