Risk Assessment and Risk-Based Auditing
The board of directors should establish an effective risk-based audit function.
An effective risk-based auditing program will cover all of an institution's major activities. The frequency and depth of each area's audit will vary according to the risk assessment of that area. Examiners should determine whether the audit function is appropriate for the size and complexity of the institution.
Internal Audit Program