Home / Insights / Glossary / Internal audit risk management

Glossary

Internal audit risk management

The independent function that tests whether controls and governance work as described.

What it means

Internal audit provides independent assurance to the board that risk management and controls operate as intended. It plans on a risk basis, tests, reports findings and tracks remediation.

Two things reliably frustrate it. Evidence has to be reassembled for every engagement because it was never held in a form that survives; and findings are closed on assertion rather than on proof, so the same issue returns next cycle.

Where MyRISK fits

What we do about it

Both are workflow failures rather than tool failures, which is what MyRISK Consulting assesses — one named workflow, traced against a real instance, with the parts that are working reported as well as the parts that are not.

MyRISK Consulting

Is this the thing you are actually trying to fix?

A definition rarely settles it. Tell us what happened — the request, the finding, the challenge or the incident — and we will say where to start, or that it isn't us.