When obtaining an understanding of an entity's internal control in a financial statement audit at a non-public company, an auditor is not obligated to: a) Assess control risk b) Document findings c) Perform tests of controls d) Communicate weaknesses