Relevant assertion level

For audit areas that are not significant or for significant areas where you have not identified any specific risks, it may be appropriate to document the risk assessment for the audit area as a whole.
If that is done, the risk assessment is assumed to be the same for all assertions and should be the highest level of risk. Be careful when documenting the assessment at the audit area level. Failure to consider the level of risk related to each assertion could result in an inappropriate audit response to risk.