The Risk-Based Audit Model
The Risk-Based Audit Model
Distinguish between the risk-based audit process and the accounts-based audit process.
Describe the activities in the risk-based audit process.
Explain the factors to consider in implementing the audit risk model.
Explain the limitations of the audit risk model.
A risk-based audit model is an audit approach that begins with an assessment of the types
and likelihood of misstatements in account balances and then adjusts the amount and type of
audit work to the likelihood of material misstatement occurring in account balances.
In a risk-based audit, the audit team views all activities in the organization first in terms of risks
to strategies and objectives, and then in terms of management's plans and processes to
mitigate the risk. The auditors obtain an understanding of the client's objectives. The risks are
identified and the auditors determine how management plans to mitigate the risk and whether
those plans are in place and operating effectively.
Under the PSAs which are risk-based, specific audit procedures vary from one engagement to
the next. the following stages are, however, involved in every engagement.
B. Planning the audit to develop an overall audit strategy and audit plan.
A. Evaluating the audit evidence obtained to determine what additional audit work (if any) is
required.
B. Forming an opinion based on audit findings and preparing the auditor's report.
Understanding the Audit Risk Model
Audit risk is the risk that the auditor may give an unqualified opinion on materially
misstated financial statements. It is determined and managed by the auditor.
Engagement risk deals with whether the auditor wants to be associated with a particular
client including loss of reputation, the inability of the client to pay the auditor, or financial loss
because management is not honest and inhibits the audit process.
Business risk is a risk that affects the operations and potential outcomes of organizational
activities.
Financial reporting risk relates to the recording of transactions and the presentation of the
financial data in an organization's financial statements.
The following considerations are important in integrating the concepts of materiality and risk in
the conduct of an audit.
1. Audits involve testing or sampling and thus cannot provide absolute (100%) assurance that
the financial statements are free of material misstatements without inordinately driving up the
cost of audits.
2. Not all clients are worth accepting. Since audits rely on testing and to some extent on the
integrity of management, there are some clients that an audit firm should not accept because
the engagement risk is too high.
3. Competition for clients among audit firms is high. Clients choose auditors based on a number
of factors including fees, service, industry, knowledge, personal rapport, and ability to assist the
client.
4. Auditors should understand society's expectations of financial reporting to reduce audit risk to
an acceptably low level and therefore minimize lawsuits that the users may possibly bring forth.
5. Risky areas of the business must be identified by the auditors to determine which account
balances are more prone to material misstatements, how the misstatements might occur and
how a client might be able to cover them up.
The relationship between engagement risk and audit risk may be presented as follows:
Engagement Risk
High Moderate Low
Set within professional standards
but can be higher than companies
Audit risk Do not accept Set very low (1%) with higher engagement risk (5%)
Setting the audit risk at 1% is equivalent to performing a statistical test using a 99%
confidence level. Audit risk set at 1% implies that the auditor is willing to take a 1%
chance of issuing an unqualified opinion on materially misstated financial statements.
Audit risk set at 5% implies that the auditor is willing to take a 5% chance of issuing an
unqualified opinion on materially misstated financial statements.
High levels of audit risk are appropriate for clients with lower levels of engagement risk.