If you are writing the CFE and tackling an Assurance role, you already know the Audit Planning Memo (APM) is a staple. A critical component of this memo is assessing the Risk of Material Misstatement (RMM) at the Overall Financial Statement Level (OFSL).
To master the APM, it helps to rely on the GCPA RAMP framework: Risk, Approach, Materiality, and Procedures. This post focuses on that crucial first letter: Risk.
Many candidates struggle not with understanding RMM, but with quickly finding the right case facts under severe time constraints. To score a “Competent” (C), you need to identify the right case facts, explain why they increase or decrease risk, and conclude on the overall risk level.
We have summarized several of the GCPA resources for Assurance competencies specific to Audit Planning Memos and RMM related AOs, and have generated the post below based on this.
Apply a clear formula for RMM
Before we dive into where to look, remember the formula graders are looking for, based on CAS 315 (Identifying and Assessing the Risks of Material Misstatement). RMM is a combination of Inherent Risk (IR) and Control Risk (CR).
To get depth in your response, use the GCPA formula:
- State the factors using case facts (What) + Explain the implication (Why does it increase/decrease the risk) = Depth.
Do not just copy a fact from the case. You must explain how that fact impacts the audit. Furthermore, to show a balanced analysis, always actively look for factors that decrease the risk of material misstatement, not just the ones that increase it.
Where to Look in Day 2 Cases
Day 2 cases are massive. You have up to 5 hours, but you can easily get lost in the weeds. In Day 2, the Assurance role is tested deeply, and RMM factors are usually scattered across multiple appendices. When assessing OFSL risks, remember that these are pervasive risks that relate to the financial statements as a whole.
1. The “Background” or “Company Overview” Section
This is usually the first page or two of the case. Graders hide high-level control environment (Control Risk) and bias factors (Inherent Risk) here.
-
Look for: Ownership changes, management turnover, lack of segregation of duties, or first-time audits.
-
Example Fact: “The company’s CFO resigned three months ago, and the junior bookkeeper has been handling the financials.”
-
Implication: There is a weakened control environment and a lack of segregation of duties, increasing the risk of errors or fraud passing through unnoticed. (RMM Increases)
2. The “Strategic Plans” or “Financing” Appendix
Management bias is the most common RMM factor on the CFE. You will almost always find it where money is discussed.
-
Look for: Bank loan covenants, plans for an Initial Public Offering (IPO), upcoming purchases/sales of the entity, or management bonuses tied to net income.
-
Example Fact: “The company needs to secure a $2 million expansion loan from the bank next month.”
-
Implication: Management has a bias to overstate revenues and understate liabilities to make the financial statements look as healthy as possible to secure the loan. (RMM Increases)
3. The “Operations” or “IT” Appendix
Complexity drives risk. If the company is doing something new, the accounting is likely to be messed up.
-
Look for: Implementation of a new ERP/IT system, market competition driving down prices, or expanding into foreign markets.
-
Example Fact: “On October 1st, the company transitioned to a new automated inventory tracking system.”
-
Implication: There is a high risk of data migration errors or system glitches during the changeover, meaning opening balances or year-end figures could be misstated. (RMM Increases)
Spotting Fraud Risk: The INPORT Framework
If you spot fraud risk factors, these automatically impact the OFSL. Use the GCPA INPORT memory aid to easily recall the three components of the Fraud Triangle:
-
INcentives and Pressures (e.g., personal financial stress, performance-based bonuses).
-
Portunity (Opportunity) (e.g., poor oversight, lack of segregation of duties).
-
Rationalization and aTtitude (e.g., a culture that prioritizes growth over compliance).
Where to Look in Day 3 Cases
Day 3 cases are short sprints (70 to 90 minutes). You do not have time to dig through endless appendices. The RMM factors here are usually explicit and front-loaded. You generally only need 2 to 4 well-explained factors to get a “C” on Day 3.
1. The Opening Paragraphs (The “Trigger”)
In Day 3, the prompt telling you to write the memo is usually in the first two paragraphs. The RMM factors are often baked right into this introduction.
-
Look for: Why the audit is happening now.
-
Example Fact: “Your firm has just been appointed as the new auditors for XYZ Corp after their previous auditors retired.”
-
Implication: This is a first-time audit. We do not have cumulative knowledge of the client, and opening and comparative balances may not be reliable since we did not audit the prior year. (RMM Increases)
2. The “Financial Update” Paragraph
Day 3 cases rarely have a dedicated financing appendix; instead, they will drop a single sentence about the company’s financial health.
-
Look for: Industry downturns, cash flow issues, or going concern indicators.
-
Example Fact: “Due to a recent supply chain crisis, the company has suffered a 30% drop in sales and is struggling to pay suppliers.”
-
Implication: The company is facing financial hardship. This creates a going concern risk and a high incentive for management to manipulate the books to hide the distress from stakeholders. (RMM Increases)
Summary Cheat Sheet: Quick RMM Identifiers
Use this table as a quick mental checklist when reading a case to ensure you capture both increasing and decreasing factors for balance:
| Factor | Type | Impact on RMM | Implication |
| New bank loan or covenant | Inherent Risk | Increases | Management has a strong bias to overstate net income and assets to secure funding. |
| Management bonus tied to profit | Inherent Risk | Increases | Creates a direct financial incentive for management to artificially inflate net income. |
| New IT or Accounting System | Control Risk | Increases | High risk of data conversion errors or lost information during the transition. |
| First-time audit | Inherent Risk | Increases | The audit firm lacks cumulative knowledge; heightened risk that opening balances carry undetected misstatements. |
| Active Internal Audit Function | Control Risk | Decreases | Management and the board are highly aware of control deficiencies and actively monitor them. |
| Long-time, experienced staff | Control Risk | Decreases | A stable control environment with experienced personnel reduces the likelihood of everyday errors. |
Final Tip for CFE Candidates
When writing your RMM section, always remember to conclude. After listing your 3 to 5 balanced factors, explicitly state: “Overall, the risk of material misstatement at the OFSL is assessed as HIGH/MODERATE/LOW.” Failing to conclude is the easiest way to drop from a “C” to an “RC”!
Looking for CFE support? Review the resources, templates, and CPA coaching programs available at www.gevorgcpa.com to help navigate your path to becoming a Canadian CPA.
