When control risk is assessed at the maximum, the extent of documentation required in the working papers is that: A) no documentation is necessary. B) the basis for the assessment and the conclusion must both be documented. C) only the conclusion needs to be documented. D) only the basis for the assessment must be documented