Auditors face a number of challenges when performing audit risk assessment. To cope with these challenges, methods are required that purposefully reduce the complexity inherent to internal control systems and that facilitate communication about internal control matters among groups of stakeholders with differing perspectives ...