The auditor should perform risk assessment procedures that are sufficient to provide a reasonable basic for identifying and assessing the risk of material misstatements.
-Information system relevant to financial reporting
_Sources of information include the auditee itself
-