It is a matter of auditor judgment to decide how discrepant project estimates and estimates provided by cost models should be to raise concerns about risks of cost and schedule overruns.
Auditors don't have discretion in determining cost and schedule estimates.