1. Risk assessment to ascertain specific risks that may affect the internal audit function achieving its strategic objectives.
2. Risk assessment of the organisation environment to ascertain risks to be considered when developing the internal audit plan.
3. Risk assessment for individual internal audit engagements and services to ascertain risks applicable to the topic to be audited.
4. Risk assessment for individual internal audit engagements and services to ascertain risks that may affect successful completion of an individual internal audit engagement or service.