How do auditors use their knowledge about the risk of material misstatement in developing an audit approach? Comment on extensiveness of testing, types of audit procedures, and the rigor of audit procedures in higher versus lower risk settings (e.g., for an assertion with a higher risk of material misstatement versus an assertion with a lower risk of material misstatement).