I'm inquiring how often other banks are conducting a Risk Assessment for developing their internal audit program schedule. Yearly, Every Two Years, etc.........

Thanks

We have it scheduled annually and could be more frequent depending on if the internal audit "found" anything that would adversely affect the risk assessment and if there were no changes in the regulation, bank, economy, regulatory enforcement, staffing,...etc.

I am currently doing it annually.

We conduct our risk assessment annually. I incorporate the results in the annual audit plan.

annually. The regulators go through it with a fine tooth comb.

We are a small institution and have been asked for the first time for a risk assessment for our Internal Audit program. I have reviewed the tools on BOL as well as other websites but have not found a template or tool that encompasses internal audit. Does anyone have a template out there that they would like to share?