Perform risk assessment
In the risk assessment phase, you should identify and assess the risks of material misstatement in the financial statements through understanding the entity (including its environment, the applicable financial reporting framework and the entity’s system of internal control) and:
Document identified risks and controls.
Complete the risk assessment.
Document the audit response to assessed risks.