Which is true about RMM?

a. Inherent risk, such as, complex calculations, technological advancements, and management override, may cause to be higher for some assertions and related classes of transactions, account balances, and disclosures than for others

b. Control risk is a function of the effectiveness of the design, implementation and maintenance of internal control by management to address identified risks that threaten the achievement of the entity’s objectives relevant to preparation of the entity’s financial statements, operations, and compliance.

c. The assessment of the risks of material misstatement may be expressed in quantitative terms, such as in percentages, or in non-quantitative terms. In any case, the need for the auditor to make appropriate risk assessments is more important than the different approaches by which they may be made

d. Internal control, no matter how well designed and operated, can only reduce, but not eliminate, risks of misstatement in the financial statements, including those that are clearly observable, because of the inherent limitations of internal control, such as the possibility of human error or mistakes, or circumvention by collusion.