Internal Audit identifies all auditable activities and relevant risk factors, and assesses their significance through an annual risk assessment, utilizing the Committee of Sponsoring Organization's ...