An effective way to perform and document an engagement-level risk assessment is to create a risk matrix listing the relevant risks and then expand the matrix to include measures of significance.
Impact and Likelihood Scales
Executive The IIA Mar 05, 2021
The IIA
The Institute of Internal Auditors
Learn more with our other resources
Getting Started With
The Global Internal Audit Standards: Domain IV
All Things Internal Audit
Identity & Access Management
Essential News for Audit Leaders Network
CAE Bulletin Issue: February 17, 2025
Tone at the Top
A New Tool to Monitor Established Risks
Global Technology Audit Guides
GTAG: Auditing Cybersecurity Operations: Prevention and Detection, 2nd Edition
All Things Internal Audit