Which of the following statements regarding the audit strategy is NOT correct?
When we have determined that substantive procedures alone will provide sufficient appropriate audit evidence to address the identified risk of material misstatement, we can opt not to test controls.
When using a substantive only strategy, we still consider the need to incorporate testing of controls in order to enable reliance on system-generated IPE.
If we found a deficiency during operating effectiveness testing in one of several controls in an assertion, we can still ‘rely on controls’ and retain our CRA, but we perform additional substantive procedures to address the risk related to the deficiency.
When the CRA is High, our preferred audit strategy is to "rely on controls" related to the risks associated with the relevant assertion.
根据企业会计准则第25号——保险合同（2020）-第九章 列报-第三节 与风险相关的披露-第一百零一条，企业应当对保险风险和市场风险进行敏感性分析并披露相关信息。这表明在审计过程中，对风险的评估和控制是重要的，特别是在确定审计策略时。
以下陈述是不正确的：
When the CRA is High, our preferred audit strategy is to "rely on controls" related to the risks associated with the relevant assertion.
这个陈述不正确，因为在风险评估（CRA）高的情况下，审计策略通常不会优先选择依赖控制。相反，审计师更可能采取实质性测试为主的策略，以应对高风险。依赖控制通常在控制风险较低时更为适用，因为此时控制的有效性更有可能提供足够的保证。在高风险情况下，仅仅依赖控制可能不足以提供充分的审计证据来应对潜在的重大错报风险。
