Audit risk consists of: