As part of internal audit’s risk assessment, a chief audit executive is determining certain factors as part of planning the areas to audit within an organizatio...