1 Answers
First of all risk assessment occurs at initial stages of audit, at this we are not sure about things we just fell or say guess how things will be.
now we predict RMM = IR x CR
In IR we dont consider effect of internal controls
But in CR we consider effect of internal controls, we predict whether controls would be operating effectively
so while determining RMM, CR is considered that means effect of controls is taken in to consideration.