Risk assessment is very much the external auditor’s work. Its purpose is to assess the risks of material misstatement in the financial statements. More risk implies that more audit work is needed to provide reasonable assurance that the FS are free of material misstatement.