A combined approach should be used when substantive procedures alone cannot provide sufficient appropriate audit evidence?