Premise: Auditors should include audit documentation on their assessment of risk, and, when risk factors are identified as being present, the documentation should include

Hypothesis: The auditors will find no risk at all.
Relation: contradiction