internal audit
independent, objective assurance and consulting activity designed to add value to and improve an organization's operations
Risk based internal audit
an internal methodology which is primarily focused on the inherent risk involved in the activities or system and provide assurance that risk is being managed by the management within the defined risk appetite level