After Auditors Have Completed Testing Controls and Drawn a Conclusion

After auditors have completed testing controls and drawn a conclusion about control risk, _______.

A) they make decisions about the nature and timing of substantive testing
B) they are ready to issue the audit opinion
C) they make decisions about the nature, timing, and extent of substantive testing
D) they should withdraw if control risk is assessed as high