What is meant by determining the degree of correspondence between information and established criteria? What are the criteria for an audit of a company’s financial statements?

1. What is meant by determining the degree of correspondence between information and established criteria? What are the criteria for an audit of a company’s financial statements?
2. What are the major causes of information risk? How can information risk be reduced?