This 3-day course teaches internal auditors how to conduct risk-based auditing. It covers how to understand enterprise risk management, use risk criteria to develop annual audit plans focused on significant business risks, and present risks effectively in audit reports. The course objectives are for auditors to appreciate their evolving role in value creation, understand the risk management process, and conduct effective audits and planning based on risk.