Was out of town for marriage so could not answer queries on daily basis.
254 — all options a / b / c lead to significant risk hence all of the above is correct answer
255 — it is not mandatory to test all controls every year, we can skip test of controls in some area, as per SA 315 test of controls are mandatory once in 3 years