Internal Audit Risk Assessment
Consistent with industry and professional standards, Internal Audit utilizes a risk-based perspective, applying its resources to areas that pose a greater degree of risk to clients and stakeholders. Internal Audit identifies the “Audit Universe” which is all of the functions/ departments at Touro using documented organizational charts. These charts are used to identify Internal Audit’s auditable entities. Auditable entities are programs, activities, functions, structures and initiatives which contribute to the achievement of the organization’s objectives.
The Department creates a risk assessment that takes into consideration the following internal and external factors: