https://de.cemle.com/post/toplist-as-detection-risk-increases-the-amount-of-evidence-an-auditor-needs-to-obtain-decreases