Expert Insights Compliance

Every year, most audit departments dust off the previous year’s risk assessment as a starting point for the upcoming year. With some variations, we all do basically the same thing. Update the audit universe, engage with management to discuss the risks in their areas, score and rank the audit universe, and then pick areas to add to the plan.