The book concentrates on compiling the Risk and Audit Universe (RAU) which is the foundation of the internal audit department’s work. It lists the objectives of the organization, the risks hindering their achievement, the controls managing the risks and the audit checks which ensure the controls proper operation.

There are two documents to download:

Book 2: Compiling a Risk and Audit Universe

The risk register (and RAU) as a spreadsheet.