Which of the following statements is true regarding the risk assessment component of internal control?

A$.$ An auditor evaluates an entity's risk assessment because it is a component of overall audit risk in a financial statement

audit.

B$.$ An auditor's evaluation of an entity's risk assessment may not be applicable to the audit of every entity.

C$.$ An auditor evaluates an entity's risk assessment to understand how management addresses risks relevant to financial

reporting.

D$.$ An auditor need not consider an entity's risk assessment because he or she is primarily concerned with audit risk in a

financial statement audit.