Due to the use of sampling techniques and other limitations inherent to information and internal control systems, the risk of not detecting a material misstatement in the CSR information cannot be totally eliminated.