Internal Audit employs an ongoing, iterative risk assessment process to identify auditable risks, completing a comprehensive review each year that includes risk themes encompassing strategic, operational, financial, compliance and IT categories.