Can an Auditor Use the Prior Period's Control Risk Assessment?