Which centric approach are you following?
I’m speaking with the legendary Tim Leech about the difference between objective, risk, compliance, process, and control centric approaches … and centric is not the same as based.
Listen in at: http://www.jasonmefford.com/jammingwithjason/ and learn the difference so you can start improving the value you add to your organization.
Risk-based internal auditing is objective-centric when you actually link to key objectives … a critical step most in #internalaudit forget. “Risk ranking an audit universe based on another centric model, does not risk-based internal audit make.” Yoda 🙂
When you are ready to become objective-centric and risk-based check out how you can get the step-by-step process for getting started: https://ondemand.criskacademy.com/p/certified-risk-based-internal-auditor-crbia/?affcode=105582_jpp6czlf