If an internal auditor's evaluation of internal control design indicates that the controls are designed adequately, the appropriate next step would be to:

a) Prepare a flowchart depicting the system of internal controls.
b) Conclude that control risk is high.
c) Test the operating effectiveness of the control.
d) Conclude that residual risk is low.

Answer: c) Test the operating effectiveness of the control.