When completing the audit of internal controls for an issuer, AS 5 requires auditors to test:
a) The design effectiveness of controls.
b) The operational efficiency of controls.
c) Only high-risk controls.
d) All financial transactions.