How to do your internal audit risk assessment

I believe internal audit should first understand the value drivers and the objectives of the organization. It should then seek to understand the risks (and continuously maintain that understanding) that are critical to the delivery of value and the achievement of corporate objectives.