In the audit risk model (AR = IR × CR × DR), if inherent risk and control risk are both high, how should the auditor respond?
-
A
Increase the acceptable level of detection risk
-
B
Decrease detection risk by performing more extensive substantive procedures
-
C
Rely more heavily on the client's internal controls
-
D
Issue a qualified opinion without further testing