Auditors have been aware of the concept of inherent risk for many years and have also made heavy use of analytical review for quite some time. The reduction of detailed testing in response to these reviews is, however, a relatively recent development. Is the ‘risk-based’ approach simply an excuse to conduct a more superficial audit?