sentence1: In planning tests of compliance with significant laws, regulations, and other compliance requirements, auditors should assess the risk that noncompliance could occur.
sentence2: Auditors calculate risk using a risk matrix of likelihood and damage.