Which of the following areas require documentation related to the auditor's risk assessment and response?
1) Internal controls
2) Financial statements
3) Audit procedures
4) Management representation