Definition

The risk that a material misstatement will not be prevented or detected by the entity’s internal controls.

Detailed Explanation

Control risk is the risk that internal controls will fail to prevent or detect material misstatements in financial statements.

Common Uses

- Used in audit planning to understand risks and design procedures.
- Used during testing (controls/substantive) and documentation of audit evidence and conclusions.

Practical Example

- Example: The auditor references **Control risk** when designing procedures and documenting conclusions in the audit file.

Why This Term Matters

- Why it matters: Supports high-quality, defensible audit conclusions and helps detect material misstatements and control weaknesses.