Audits are not focused on risk and significance

Control

Effectively characterize the audit universe