If inherent and control risks are considered high, an auditor can keep the overall audit risk at a reasonable level by lowering the detection risk. This can be achieved by targeted audit selections or increased sample sizes.