What is audit risk?
Risk that auditor does not detect one or more of the risks that relate to an audit and gives an opinion that financial statements are true and fair, when, in reality, they are materially misstate in some way due to incorrect and/or inappropriate accounting or disclosure.
What is audit risk a factor of?
Inherent risk, control risk and detection risk
How does the audit risk model work?
Isolating elements of the audit process and reviewing each one to see what the impact on audit work will be
What is the audit risk model?
Audit risk = inherent risk x control risk x detection risk
What is audit risk in the audit risk model?
Risk that you give an incorrect opinion e.g., auditor may wish to limit the chance of this happening to only 5% (i.e, working towards 95% accuracy)
What is inherent risk in the audit risk model?
Such risk is always present in areas of the client that are susceptible or prone to fraud or error - are then prioritised on a spectrum of inherent risk by impact and likelihood
what is control risk?
There is another risk only ever present at clients, representing the risk of controls not preventing or detecting fraud or error (e.g., human error or management override)
What do inherent risk and control risk put together make up?
Risk of material misstatement
What makes up risk of material misstatement put together
Inherent risk and control risk
What is detection risk?
Risk that audit procedures will not detect a misstatement.
Representation of the acceptable amount of risk faced by the auditor
What is the relationship between inherent and control risk AND detection risk?
As inherent and control risk increase, level of acceptable detection risk decreases
What will the auditor have to do when the level of detection risk decreases?
Auditor performs more testing to keep audit risk at an acceptable level
During the process of testing to address detection risk, what will be used frequently?
Sampling
When will sampling be used in relation to detection risk?
During the process of testing to address detection risk
What does using sampling during the process of testing to address detection risk expose the auditor to?
2 types of detection risk:
Sampling risk
Non-sampling risk
What is sampling risk?
Risk that occurs every time a sample is selected and represents the risk the sample does not adequately represent the population
What is non-sampling risk?
Subtly different from sampling risk and occurs from poor interpretation of a sample by the auditor
Give an example of non-sampling risk
The auditor may have limited experience of sampling and may have selected a suitable sample but fails to derive the right conclusions from the data obtained - may occur if the auditor is short of time or does not fully understand the client
In general terms, what could the audit risk model be looked at as?
A mathematical equation where you are looking for the balancing figure
How does detection risk look for the balancing figure?
Considers the desired audit risk and likely inherent and control risks posed by the client - auditor then has to consider the amount of work that needs to be done to balance the equation
What can auditors use to help them assess risks ?
Graphical means
How can auditors use graphical means to help them assess risks?
By assigning each risk a category or description in terms of two characteristics:
a) Likelihood - how possible a risk is to occur
b) Impact - if it does occur, how significant will it be
Once risk is assigned a category or description on the basis of likelihood and impact, what can then be done?
Can be plotted on a risk matrix
What does the risk matrix look like?
Likelihood on y-axis and impact on x-axis with bars going along bottom and side from low to medium to high