Once risks have been identified, they should be analyzed for their possible effect.
When risks are identified, they should be analyzed for their effect.
Misappropriation of assets can lead to misstatements, which are relevant to auditors.