CPA PEP Prep Q&A
My 2 cents. Number 1 does seem to be the incorrect one. Although the inherent risk is assessed as low, the auditor still has to perform substantive procedures specifically directed to the identification of related parties and related party transactions. And this procedures has no relevance whether or not the auditor's risk assessment include or does not include an expectation of the operating effectiveness of controls.