When assessing risk, it is important to remember that
◦ for acceptable audit risk, the SEC decides the risk the CPA firm should take for public clients.
◦ inherent risk can be changed by the auditor.
◦ detection risk can only be determined after audit risk, inherent risk, and control risk are determined.
◦ control risk is determined by company management since they are responsible for internal control.