The need to manage risks is increasingly recognised as essential to effective corporate governance and to maintaining an effective system of internal control. Internal audit plays a key role in providing assurance that risks to the organisation are properly managed. Risk-based auditing links internal audit to an organisation’s overall risk management framework.