Final answer:
When fraud risk factors are identified during an audit, the auditor's documentation should include the risk factors identified and the auditor's response to the identified risk factors.
Step-by-step explanation:
The correct answer is (1) Yes Yes.
- The auditor's documentation should include the risk factors identified.
- The auditor's documentation should also include the auditor's response to the identified risk factors.
- Therefore, both of these options should be marked as 'Yes'.