Text this: Risk-based audit approach in the internal audit department of a financial institution :