Use of auditor judgment or of a risk matrix is necessary in revising planned detection risk whenever:
a) risk assessments are not quantified.
b) assessed control risk at the account balance level does not support the planned level of control risk.
c) control risk is assessed above the minimum.
d) control risk is assessed below the maximum.