Which of the following statements is correct concerning an auditors assessment of control risk? a) Assessing control risk may be performed concurrently during an audit with obtaining an understanding of the entitys internal control. b) Evidence about the operation of internal control in prior audits may not be considered during the current years assessment of control risk. 3 c) The basis for an auditors conclusions about the assessed level of control risk need not be documented unless control risk is assessed at the maximum. d) The lower the assessed level of control risk, the less assurance the evidence must provide that the control procedures are operating effectively.