a nonissuer client is considering using a service organization to process its payroll. the client’s auditor is unsure what his responsibility for obtaining sufficient appropriate audit evidence is in this audit of the client’s financial statements. which section of the aicpa’s generally accepted auditing standards describes the auditor’s responsibility in this situation?