Which statement does NOT accurately summarize auditors' requirements regarding internal control?
a) Auditors are required to obtain an understanding of the design and implementation of internal control.
b) Auditors must test the operating effectiveness of internal controls.
c) Auditors are solely responsible for designing and implementing internal controls for their clients.
d) Auditors should assess control risk based on their understanding of internal control.
