Internal Audit Plan

A risk-based internal audit plan concentrates assurance where residual risk is highest, coordinated with the other lines of defence. This template builds the audit universe, scores it on inherent risk and control effectiveness, and allocates audit effort to the highest residual risk — using the IIA Three Lines Model so internal audit gives independent assurance over governance, risk, and control.