• Enterprise risk assessment: The internal audit team conducts risk assessment at the company level once a year, which includes an assessment of the external and internal environment in which the company operates.