The internal audit activity should assist the organization by identifying and evaluating significant exposures to risk and contributing to the improvement of risk management and control systems.

• 内部审计活动应通过识别和评估重大的风险暴露,并致力于风险管理和控制系统的改善,来帮助组织。