- This topic has 7 replies, 5 voices, and was last updated 8 years, 7 months ago by .
-
Topic
-
Hello all,
I recently received a 74 on Auditing. Now that I’m done throwing things (I kid, I kid…sort of), I am not sure I completely understand the difference between Inherent Risk versus Control Risk. I merely studied the difference between IR/CR (auditor assesses; auditor cannot control) versus DR (auditor accepts; auditor can control).
According to my understanding of the AICPA examples [https://www.aicpa.org/Research/Standards/AuditAttest/DownloadableDocuments/AU-00312.pdf], the main difference between IR and CR is that Inherent Risk can involve external factors. Whereas, CR only involves risks that the internal controls will not catch the error.
To put it another way, am I correct to say: (1) With inherent risk there is no way for the audit client to control or mitigate with proper control activities; (2) with control risk the audit client can control or mitigate with proper control activities [RIPS for Becker folk–Review of others, Info processing, Physical controls, Segregation of duties]; and (3) Detection risk involves what the EXTERNAL AUDITOR can control.
And, if ABC, Co were going to issue an IPO, inherent risk would increase, independent of control risk? The External Auditor would then decrease the Detection Risk he would accept?
Do I have this right?
- The topic ‘Inherent v Control Risk’ is closed to new replies.