Determining the Appropriate Assurance Activities.