It is a matter of auditor judgment to decide how discrepant project estimates and estimates provided by cost models should be to raise concerns about risks of cost and schedule overruns.
Auditors must judge whether or not project estimates raise concerns about cost and schedule failures.