The idea that audit plans should be risk based is so old and widely accepted that we give no second thought to it. And yet in my 16 years of risk across 4 continents I have seen 100s of audit plans and I can assure you NONE of them were risk based. They were opinion… Continue reading Creating a risk-based audit plan, is it a myth?