Where the auditor's assessment of inherent and control risk is high, the detection risk is set at a lower level to keep the audit risk at an acceptable level.
Lower detection risk may be achieved by increasing the sample size for audit testing. Conversely, where the auditor believes the inherent and control risks of an engagement to be low, detection risk is allowed to be set at a relatively higher level.