The auditor shall identify and assess the risks of material misstatement at:
- the financial statement level; and
- the assertion level for classes of transactions, account balances, and disclosures, to provide a basis for designing and performing further audit procedures.
For this purpose, the auditor shall:
- Identify risks throughout the process of obtaining an understanding of the entity and its environment, including relevant controls that relate to the risks, and by considering the classes of transactions, account balances, and disclosures in the financial statements;
- Assess the identified risks, and evaluate whether they relate more pervasively to the financial statements as a whole and potentially affect many assertions;
- Relate the identified risks to what can go wrong at the assertion level, taking account of relevant controls that the auditor intends to test; and
- Consider the likelihood of misstatement, including the possibility of multiple misstatements, and whether the potential misstatement is of a magnitude that could result in a material misstatement.