Inherent risk is associated with
the unique characteristics of the business or industry of the client. Firms in
declining industries are considered to have more inherent risk than firms in
stable or thriving industries. Inherent risk will not be reduced by internal
control. Control risk is the likelihood that the control structure is flawed
because internal controls are either absent or inadequate to prevent or detect
errors in the accounts. Internal controls may be present in firms, yet the
financial statements may be materially misstated due to circumstances outside
the control of the firm. For example, a customer, on the verge of bankruptcy,
has an outstanding Accounts Receivable that is unlikely to be collected.
Detection risk is the risk that auditors are willing to accept that errors are
not detected or prevented by the control structure. Typically, detection risk
will be lower for firms with higher inherent risk and control risk. Describe the relationship between tests of
controls and substantive testing.