Audit risk is the risk that an auditor will provide an inappropriate audit opinion when the financial statements contain material misstatements. Audit risk has three components: inherent risk, control risk, and detection risk. Inherent risk is the possibility of material misstatements in the financial statements due to factors like complex accounting issues or assets susceptible to theft. Control risk is the possibility that misstatements will not be prevented or detected by internal controls. Detection risk is the possibility that audit procedures will fail to detect material misstatements. The auditor determines an acceptable level of overall audit risk.