When tests internal controls do not support a previous conclusion about internal controls, the auditor should _______.

a)lower inherent risk related to internal control

b)consider withdrawing from the engagement

c)reassess internal controls at a higher level

d)obtain assurances about internal control from senior management