Auditors have the responsibility to be familiar with the particular Statements on Auditing Standards (SAS) issued by the Auditing Standards Board that are applicable to each individual audit. Discuss the three procedures that SAS 109 defines in the risk assessment of a potential client. How does each one provide independent, relevant, and direct evidence to provide adequate and sufficient evidence to reach a conclusion?