A firm uses the audit risk model, AR=RMMXDR to plan audit programs, as described below. This often involves determining required DR after specifying M and AR, and then assessing the operating effectiveness of controls in terms of RMM, or DR=RMM/AR. THE FIRM'S POLICIES Audit Risk: The firm specifies AR for every application area and for any materiality amount, as: VERY LOW 1% to