So what I know: first, assess the RMM. Then test of controls. finally substantive testing. Knowing this, I don't understand why the answer is what it is. How would you even know if the substantive testing evidence is sufficient and appropriate if the testing of controls is done before?
