This Handbook is a guide for internal auditors and any other assurance providers. In particular, it describes how to use the risk management process to; develop a risk-based assurance strategy and program, plan an assurance engagement, report the assurance program, and design controls. The Handbook also provides a guide to assessing the adequacy of risk management framework and process.
