Understanding the Relationship between Business Risk and Inherent Risk

Business risk and inherent risk both bear on the audit; the audit risk model; and the nature, timing, and extent of work performed. Inherent risk and business risk bear an inverse relationship to detec‐tion risk and have a direct effect on the level of work performed. Neither risk can be eliminated totally and neither is controllable by the auditor. Business risk relates to the financial statements and affects overall audit risk; inherent risk applies to an individual audit area. Inherent risk is explicitly included in the professional standards and the audit‐risk model while business risk is not and has only an indirect bearing on the model. Management can take steps to affect the level of inherent risk, but the perceptions of users of the financial statements bear on business risk.