Reviewed by David Kindness
Fact checked by Vikki Velasquez
For an auditor, inherent risk is the risk of a material mistatement at the assertion and financial statement levels. Assertions are claims made by business owners or executives that state information provided during an audit is accurate. There is always a risk of financial statement inaccuracy, even when controls are implemented.
Key Takeaways
- Auditors work to ensure that corporate controls exist and that financial statements are free from errors, fraud, and misstatements.
- Inherent risk is inevitable, and occurs even when there are controls in place.
- An auditor’s knowledge and judgment of the industry, corporate transactions, and company assets can help determine inherent risk.
- Companies with complicated business structures and transactions tend to have more inherent risk.
- Lowering inherent risk often involves reevaluating existing internal controls and implementing new practices.
How Inherent Risk Is Assessed
The Public Company Accounting Oversight Board oversees the audits of publicly traded companies, brokers, and dealers and publishes standards for auditors to follow. According to the standards published, “The auditor assesses inherent risk using information obtained from performing risk assessment procedures and considering the characteristics of the accounts and disclosures in the financial statements.”
An auditor’s risk assessment procedures must include:
- Obtaining an understanding of the company and its environment (events, conditions, and activities in the industry, and regulatory concerns)
- Obtaining an understanding of internal control over financial reporting
- Considering information from the client acceptance and retention evaluation, audit planning, activities, past audits, and other engagements performed for the company
- Performing analytical procedures
- Conducting a discussion among engagement team members regarding the risks of material misstatement
- Inquiring of the audit committee, management, and others within the company about the risks of material misstatement
The auditor must also be very familiar with:
- The industry as a whole
- The types of transactions that occur within a particular company
- The assets the company owns
- Generally accepted accounting principles
Note
Material misstatements are errors or fraudulent entries in financial statements that can impact people who use the statements to make decisions.
Based on their assessment, an auditor regards each audit area as either low, medium, or high in inherent risk (some use only high and low, normal and high, or other combinations). Inherent risk is high whenever there is a higher chance of material misstatements. It can also increase for companies with complex and dynamic day-to-day operations.
Why Inherent Risk Matters
There are risks present even if an auditor clears a company’s financial statements of any material misstatements. This is known as audit risk. Despite being given the all-clear, statements may still have some inconsistencies. Audit risk can be divided into three categories: control risk, detection risk, and inherent risk.
The risk that a company’s internal practices and controls don’t prevent any misstatements is called control risk. Detection risk, on the other hand, is the risk of an auditor failing to detect any risks. Inherent risk is any risk of error or fraud that occurs naturally when inadequate risk management is in place to mitigate it. Put simply, there is a risk of material misstatements happening when preparing financial statements.
Important
While companies can’t prevent inherent risk altogether, they can lower its level. Implementing or increasing internal controls is one of the best ways that companies have to reduce the level of inherent risk in their statements.
Examples of Inherent Risk Factors
Assessing inherent risk tends to be a more subjective process than other components of the audit. However, there are often clear and observable factors to consider, such as the economy, the industry, and previously known misstatements that help the auditor arrive at an assessed level of inherent risk for each audit area.
Here are a few examples of inherent risk that exist within the corporate world. The following are types of factors that auditors consider as they assess inherent risk:
- Financial transactions that require complex calculations are inherently more likely to be misstated than simple calculations.
- Cash on hand is, by nature, more susceptible to theft than a large inventory of coal.
- Rapid technological developments may create a higher risk of inventory becoming obsolete more quickly than in other industries.
- A struggling company may inherently have a greater incentive to misstate financial information to meet certain covenants.
- A company that has improperly reported a particular balance in the past may be inherently more likely to misstate it again.
What Best Describes Inherent Risk?
Inherent risk is the chance that a material misstatement exists due to a lack of controls that would prevent the error or fraud.
What Is a Simple Example of Inherent Risk?
A simple example of inherent risk is an internal accountant who makes fraudulent or erroneous entries that create account misstatements on a company’s financial reports.
What Is Meant by Inherent Risk?
Inherent risk is the unavoidable risk of material misstatements on financial statements due to a lack of appropriate controls.
The Bottom Line
Auditors assess inherent risk using their experience and knowledge of accounting procedures to expose material misstatements in a company’s financial statements. The misstatements may be erroneous or fraudulent, but the risks of it occurring are inherently inevitable without implementing controls, and sometimes risks exist even when controls are in place.