Which of the following statements is true regarding the concept of detection risk? a. after assessing inherent and control risk and determining the level of acceptable audit risk, the auditor determines detection risk. b. detection risk is under the control of the auditor, and the level of audit effort that the auditor expends on the engagement depends on the level of detection risk. c. when the risk of material misstatement is higher, detection risk is lower in order to reduce audit risk to an acceptable level. d. the auditor controls detection risk through the nature, timing, and extent of substantive audit procedures. e. all of the above are true