Back to Explore
🏷️

Audit Risk Model

Inherent Risk by Assertion

Inherent risk ratings mapped to financial statement assertions across significant account areas.

📖 6 min read🎯 Intermediate✍️ Updated 2026

Why risk must be assessed at the assertion level

An overall account risk rating is too coarse for effective audit planning, because the same balance may be high risk for valuation yet low risk for existence, a distinction the ISSAI audit risk model requires. Inherent risk, the susceptibility to misstatement before controls, is properly assessed against each financial statement assertion. AuditPro Core maps inherent risk ratings to assertions across significant accounts so procedures target the specific assertion at risk.

The Numbers

AuditPro Core renders this view from your tenant's live, tamper-evident records. The figures below are illustrative sample data.

Assertions assessed

84

Higher inherent risk

23

27%

Valuation flagged

12

most common

Significant risks

7

Risk rating by assertion

Assertion risk by account area

Account areaKey assertionRatingSignificant
Property & equipmentValuationHigherYes
ReceivablesValuationHigherYes
RevenueCompletenessHigherYes
ProvisionsValuationHigherYes
PayablesCompletenessModerateNo

Figures shown are illustrative sample data for demonstration. AuditPro Core renders these views from your own tenant's live, tamper-evident records.

Financial statement assertions

Assertions such as existence, completeness, valuation, rights and obligations, and presentation are the specific claims management makes. Each can fail independently of the others.

Inherent risk defined

Inherent risk is the susceptibility of an assertion to material misstatement before considering controls. It reflects the nature of the item, not how well it is managed.

Why assertion-level matters

Different assertions demand different procedures; confirming existence does not address valuation. Assessing risk per assertion ensures the procedure actually responds to the risk.

Significant accounts focus

Effort concentrates on significant accounts where an assertion failure would be material. Mapping risk by assertion shows precisely which procedure each account needs.

How AuditPro Core Bridges the Gap

  • Assertion mapping: inherent risk is rated against each relevant assertion for significant accounts.
  • Procedure linkage: high-risk assertions connect to the audit procedures designed to address them.
  • Continuous monitoring: ratings adjust as the business and its accounts change between periods.
  • Audit-ready export: the assertion-level matrix documents the basis for the planned audit response.

Key Takeaways

  • An overall account rating hides assertion-specific risk.
  • Inherent risk is susceptibility before controls, set by the item's nature.
  • Different assertions need different procedures; match them precisely.
  • Focus assertion-level assessment on significant accounts.

See This on Your Own Data

AuditPro Core renders this dashboard from your tenant's live, tamper-evident records — every figure traceable to source.