Back to Explore
⚠️

Audit Risk Model

Risk of Material Misstatement by Cycle

Assessed risk of material misstatement at the assertion level rolled up to transaction cycles.

📖 6 min read🎯 Intermediate✍️ Updated 2026

Why risk of material misstatement by cycle matters

The risk of material misstatement, the combination of inherent and control risk, is the auditor's central assessment under the ISAs and drives the entire response plan. Rolling assertion-level assessments up to transaction cycles gives both the audit team and the audit committee a view of where misstatement risk concentrates across the financial statements. AuditPro Core aggregates assertion-level RoMM into cycle-level views so high-risk cycles such as revenue or procurement receive proportionate audit response.

The Numbers

AuditPro Core renders this view from your tenant's live, tamper-evident records. The figures below are illustrative sample data.

Cycles assessed

6

Significant risks

4

Cycles with fraud risk

2

Performance materiality

R8.5m

RMM score by cycle

Significant-risk cycles

CycleRMMSignificantFraud risk
Revenue17YesYes
Expenditure20YesYes
Payroll11NoNo
Fixed assets14YesNo
Financial close16YesNo

Figures shown are illustrative sample data for demonstration. AuditPro Core renders these views from your own tenant's live, tamper-evident records.

Risk of material misstatement

RoMM is the risk that a material misstatement exists before the auditor's procedures, combining inherent susceptibility and the likelihood controls fail to prevent or detect it. It is assessed, not controlled, by the auditor.

Assertion to cycle roll-up

Misstatements arise at the assertion level but management and oversight think in terms of cycles. Rolling assertions up to cycles bridges the auditor's granularity with the institution's operational structure.

Significant cycles

Cycles with high aggregate RoMM, often revenue, expenditure and procurement in the public sector, demand the most rigorous response. Identifying them early shapes the whole audit strategy.

Fraud and override

Certain cycles carry a presumed risk of fraud, such as revenue recognition and management override of controls. These attract mandatory procedures regardless of other assessment factors.

How AuditPro Core Bridges the Gap

  • Assertion roll-up: RoMM is assessed at assertion level and aggregated to transaction cycles automatically.
  • Significant-cycle flags: cycles breaching risk thresholds are highlighted to focus audit strategy and committee attention.
  • Traceability to assertions: each cycle score drills through to the assertion-level assessments behind it.
  • Audit-ready risk summary: the cycle view exports to document the basis for the planned audit response.

Key Takeaways

  • RoMM combines inherent and control risk and is assessed, not controlled.
  • Roll assertion-level risk up to cycles to align audit and management views.
  • Revenue, expenditure and procurement typically carry the highest RoMM.
  • Presumed fraud risks attract mandatory procedures regardless of scoring.

See This on Your Own Data

AuditPro Core renders this dashboard from your tenant's live, tamper-evident records — every figure traceable to source.