Untitled

Audit Risk and the Audit Risk Model

  • Definition of Audit Risk: Audit risk is the risk that the auditor expresses an inappropriate audit opinion when the financial statements are materially misstated. Audit risk is a function of the risks of material misstatement and detection risk.

  • The Audit Risk Model:

    • The components of audit risk are combined in the model:         Audit Risk=Inherent Risk×Control Risk×Detection Risk\text{Audit Risk} = \text{Inherent Risk} \times \text{Control Risk} \times \text{Detection Risk}

    • Risks of Material Misstatement (RMM): The risk that financial statements are materially misstated prior to audit. RMM is composed of inherent risk and control risk, which are the entity's risks and exist independently of the audit of financial statements.

    • Practical Example of Audit Risk: If an entity with profit before tax of Shs 100m\text{Shs } 100\text{m} incurs Shs 20m\text{Shs } 20\text{m} on replacement, refurbishment, and repairs of plant during the year, an audit risk arises that expenditure on repairs is incorrectly capitalized as non-current assets, resulting in non-existent assets appearing on the statement of financial position.

  • Inherent Risk (IR):

    • Definition: The susceptibility of an assertion about a class of transaction, account balance, or disclosure to a misstatement that could be material, either individually or when aggregated with other misstatements, before consideration of any related controls.

    • Assessment of Inherent Risk: Inherent risk is assessed by obtaining an understanding of the entity and its environment, as well as the applicable financial reporting framework.

    • Inherent Risk Factors (ISA 315 Revised):

      • Complexity: Higher complexity in accounting or reporting requirements leads to higher inherent risk (e.g., auditing a large, multinational insurance group).

      • Subjectivity: Higher inherent risk exists where management selects valuation techniques or models for non-current assets (e.g., investment properties) or accounting estimates (e.g., depreciation).

      • Change: Rapid changes in economic conditions, markets, customers, industry dynamics, supply chains, products/services, operating locations, corporate structures (acquisitions or mergers), key personnel, IT environments, financial reporting frameworks, credit/capital availability, regulatory investigations, or new statutory enactments.

      • Uncertainty: Significant measurement uncertainty in accounting estimates or pending litigation and contingent obligations (e.g., product sales warranties, environmental rehabilitation provisions).

      • Susceptibility to Management Bias or Fraud: Transactions with related parties or executive remuneration schemes heavily reliant on reported financial results.

  • Control Risk (CR):

    • Definition: The risk that a misstatement that could occur in an assertion about a class of transaction, account balance, or disclosure and that could be material, either individually or when aggregated with other misstatements, will not be prevented, or detected and corrected, on a timely basis by the entity's internal control.

    • Inherent Limitations: Internal control, regardless of how soundly designed and executed, can only reduce—never eliminate—risks of material misstatement. Control risk always exists due to inherent human error, poor judgment, or management override.

  • **Detection Risk