In planning tests of compliance with significant laws, regulations, and other compliance requirements, auditors should assess the risk that noncompliance could occur.
Auditors should not consider the risk of noncompliance when planning tests of compliance.