Fundamental approaches to the preparation of a risk-based internal audit work plan

Abstract

The article discusses the fundamental approaches to planning the work of internal audit based on a risk-based approach, taking into account the requirements of international auditing standards, the updated concept of three lines of defense, recommendations for the organization of risk management and internal control. The problems of the article are relevant in the conditions of rapid changes in the business environment, the emergence of new risks, the increasing complexity of business processes of organizations and the regulatory framework, the development of corporate governance practices, leading to the need for rapid adaptation of the internal audit function to the changes taking place. The material of the article is presented taking into account the current regulatory framework, international standards of auditing, International foundations of professional practice of internal audit.