The auditor must evaluate control deficiencies [both individually and in combination] to determine whether they represent significant deficiencies or material weaknesses. The severity of a deficiency, or a combination of deficiencies,

a) Only evaluated individually
b) Only evaluated in combination
c) No evaluation required
d) Context-dependent evaluation