During a certification audit, the auditee proved to the auditor through documented information that it had conducted a risk assessment and had selected a number...