54. Which of the following is incorrect about the auditor’s risk assessment procedures?
A. Obtain understanding of the entity and its environment, including its internal
control, is a continuous, dynamic process of gathering, updating and analysing information throughout the audit.
B. In performing risk assessment procedures, the auditor may obtain audit evidence about classes of transactions, account balances, or disclosures and related assertions, and about the operating effectiveness of controls, even though such procedures are not specifically planned as substantive tests or tests of controls.
C. The auditor should perform substantive procedures and tests of controls after the risk assessment procedures are performed.
D. Obtaining understanding of internal control is not normally sufficient to serve as testing the operating effectiveness of the control.