Back to results for “Internal Controls Evaluation”
Auditing & Assurance › Audit Sampling

What are the risks of over-reliance and under-reliance (for tests of controls)?

Intermediate

Answer

In tests of controls, the risk of over-reliance (or incorrect acceptance) is concluding controls are effective when they aren't—it affects audit effectiveness (a wrong opinion risk). The risk of under-reliance (incorrect rejection) is concluding controls are ineffective when they are—it affects efficiency (unnecessary extra work). Over-reliance is the more serious concern.
Real-world example Concluding a control works when it doesn't (over-reliance) could let a material misstatement pass—worse than doing extra testing.

Common follow-ups: Which risk threatens effectiveness? | Why is over-reliance the bigger concern?