Fraud Risk Assessment
The fraud risk assessment begins with ranking the likelihood and significance of fraud activities associated with IT processes. PCAOB Auditing Standard (AS) No. 2 provides an example of the probability of a risk and its corresponding significance. This PCAOB standard specifies three risk levels:
Remote
More than remote
Probable
The PCAOB standard also defines significance of a risk into three categories:
Inconsequential
More than inconsequential
Material