Internal Audit

Risk-based auditing

Risk-based auditing is the audit approach that prioritizes internal audit activities based on the significance of risks to organizational objectives using risk assessment. This methodology ensures audit effort concentrates where residual risk is highest, considering inherent risk and control effectiveness.

Source: COSO ERM 2017, IIA Global Internal Audit Standards 2024

← All terms