Auditor’s response and documentation (CAS 230, CAS 330 & CAS 500)