https://de.ketiadaan.com/post/when-an-audit-assess-control-risk-below-the-maximum-level-the-auditor-is-required-to-document-his-or-her