When the computed upper exception rate (CUER) is greater than the tolerable exception rate (TER), it is necessary for the auditor to take specific action. Which of the following courses of action would be most difficult to justify?
◦ Reduce the tolerable exception rate so as to accept the sample results.
◦ Expand the sample size and perform more tests.
◦ Revise the assessed control risk upward.
◦ Write a letter to management which outlines the control deficiencies.