An effective way to perform and document an engagement-level risk assessment is to create a risk matrix listing the relevant risks and then expand the matrix to include measures of significance.
The Institute of Internal Auditors
Learn more with our other resources
Getting Started With
Tone at the Top