"The internal audit (IA) activity must evaluate and contribute to the improvement of the organisation’s governance (G), risk management (RM), and control (C) processes using a systematic, disciplined, and risk-based approach."

Performance Standard 2100, the IPPF, IIA