The actual level of control risk, but not inherent risk, is directly controllable by the auditor.

Question

Quizplus · Accepted Answer

Control risk is the risk that a misstatement that could occur in an account balance or class of transactions and that could be material, either individually or when aggregated with misstatements in other balances or classes, will not be prevented, or detected and corrected, on a timely basis by the entity's internal control. It is related to the effectiveness of the design and operation of internal controls, and is a factor of the entity's management and internal processes, not directly controllable by the auditor. The auditor's role is to assess and respond to the risks of material misstatement, including control risk, not to control them.

The Actual Level of Control Risk, but Not Inherent Risk