With regard to entities that have locations or business units that are judged to have financial reporting risks, the auditor

Multiple Choice

Need not perform any audit procedures.

Must first determine whether the internal audit staff has performed testing at such locations.

Must first determine whether those risks are adequately addressed by entity$-$level controls.

Must first evaluate the risk of financial reporting fraud.