How does Internal Audit decide what to audit?
Internal Audit selects departments or functions to audit based on an annual risk assessment. The existence of certain risk factors, along with input from management and staff, allows Internal Audit to weigh and prioritize known risks and select projects for audit, based on the degree of associated risk.