Internal Audit

Risk-based auditing

Risk-based auditing is the audit approach that prioritises internal audit activities based on the significance of risks to organisational objectives using risk assessment. This methodology ensures audit effort concentrates where residual risk is highest, considering inherent risk and control effectiveness.

Source: COSO ERM 2017, IIA Global Internal Audit Standards 2024

Last updated:

← All terms