Developing a Risk-Based Internal Audit Plan - 2nd Edition - Global Practice Guide

Developing a Risk-Based Internal Audit Plan - 2nd Edition - Global Practice Guide

The guide provides practical guidance on developing and maintaining a risk-based Internal Audit Plan that is aligned with the organization’s strategy, objectives, and risk profile. It describes a structured process for identifying and prioritizing risks, assessing resource needs, engaging with senior management and the board, and defining audit activities that support organizational goals.

The document also emphasizes the importance of regularly reviewing and updating the audit plan to reflect evolving risks, business priorities, governance maturity, and technological developments, ensuring that Internal Audit remains responsive and focused on the areas of greatest value and risk.