When developing an effective risk-based plan to determine audit priorities, an internal audit activity should start by:
Identifying risks to the organization's operations.
Observing and analyzing controls.
Prioritizing known risks.
Reviewing organizational objectives.
Submit