Risk Assessment and Internal Audit Plan

This tool contains three sample reports that detail results from an annual risk assessment designed to help organizations measure and improve their internal audit process.

This plan is not intended to be a comprehensive, detailed audit work program. We recommend that organizations develop specific audit work programs for each audit project outlined. This audit plan is not intended to be static or unchangeable. Changes in conditions, problems encountered during projects or special requests may require alterations to the plan. Any significant changes to the plan should be proposed to the audit committee and internal audit steering team.