Inherent Risk Score

Combine inherent-risk factors into a weighted score.

Description

Inherent-risk factors combine complexity, subjectivity, change and fraud susceptibility.

Inherent-risk factors combine complexity, subjectivity, change and fraud susceptibility. This fixed score is a planning heuristic.1

Combine inherent-risk factors into a weighted score.

When to use Inherent Risk Score

Use this tool to combine inherent-risk factors into a weighted score.

Prepare the documented facts, aligned totals or expected/observed evidence labels requested. Choose applicable requirements and thresholds separately before interpreting a planning screen.

How to use Inherent Risk Score and understand its results

  1. Prepare the documented facts, aligned totals or expected/observed evidence labels requested. Choose applicable requirements and thresholds separately before interpreting a planning screen.
  2. Enter complexityScore, subjectivityScore, changeScore, fraudSusceptibilityScore, riskThreshold using the field table and calculation rules, then run the tool.
  3. Read weightedRiskScore, thresholdMargin, riskLevel. The explanation below defines the units, signs, ordering and any flags or placeholder values.
  4. If the tool reports an input issue, correct the values and run it again. Apply the stated assumptions when interpreting a successfully returned result.
Input fieldMeaningValue type; see rules belowRequirement
complexityScoreComplexity scorenumber; minimum: 0Required
subjectivityScoreSubjectivity scorenumber; minimum: 0Required
changeScoreChange scorenumber; minimum: 0Required
fraudSusceptibilityScoreFraud susceptibility scorenumber; minimum: 0Required
riskThresholdHigh-risk thresholdnumber; minimum: 0Required

Enter nonnegative scores/threshold; return weighted score/margin; ≥threshold high, ≥.6threshold moderate, otherwise low.

score=.25complexity+.25subjectivity+.20change+.30fraud

Units, indexing, boundary conditions and exceptional cases are defined in the calculation rules above.

Output fieldMeaningValue type
weightedRiskScoreWeighted inherent-risk scorenumber; minimum: 0
thresholdMarginRisk-threshold marginnumber
riskLevelInherent risk levelstring; one of "low", "moderate", "high"
json
{
  "input": {
    "complexityScore": 80,
    "subjectivityScore": 60,
    "changeScore": 50,
    "fraudSusceptibilityScore": 70,
    "riskThreshold": 65
  },
  "output": {
    "weightedRiskScore": 66,
    "thresholdMargin": 1,
    "riskLevel": "high"
  }
}

Limitations and assumptions

Scores are not capped at 100. No audit evidence, materiality or formal risk assessment is performed.

Numeric inputs, where present, must be finite. Follow the calculation-specific rules for overflow, underflow and exceptional cases. Missing required fields, extra fields, wrong value types and violations of the calculation rules are input errors.

Alternative or Complementary methods

Use EQR Selection Risk: Score engagement quality-review selection risk. For a complementary task, use Significant Transaction Class: Score a transaction class for audit significance.

References

  1. Inherent Risk Score — tool.io

Similar or alternative tools

Don't forget to set a bookmark for tool.io!
Privacy | Imprint | Cookies