Internal Auditing:
Setting risk-based-internal auditing policy
Risk identification and assessment to formulate the risk-based audit plan
Development of internal auditing reporting and evaluation system
Setting criteria to form the audit committee along with reporting lines
Establishing a system for corrective and preventive actions

 

Risk Management and Control Self Assessment (CRSA):
Risk identification
Risk assessment
Risk prioritization
Establishing controls and risk matrix