The inherent risk and control risk is assessed by the auditor at three levels – high or maximum risk, medium or moderate risk, and low risk. High inherent and control risks call for a low detection risk so as to have an overall low audit risk. The auditor, therefore, needs to carry out more detection procedures to be convincingly assured about the financial statements being free from material misstatements.