Which of the following occurs when control risk is assessed excessively high based on sample results?
1) The auditor concludes that the control risk is lower than it actually is.
2) The auditor concludes that the control risk is higher than it actually is.
3) The auditor concludes that the control risk is at an appropriate level.
4) The auditor concludes that the control risk cannot be determined.