We are about a 1.5 billion dollar community bank. I am wanting to change my Internal Audit Risk Assessment. If someone is using an excel format approach and is willing to share, it would be greatly appreaciated.

We do not use excel...and are currently revising our risk assessment methodology.

I am using excel. I have a series of sheets for all of the areas that I audit that I use to evaluate controls. It feeds into a summary sheet where I also assign a value for inherent risk and whether the risk is increasing, stable or decreasing. The score that is calculated for each area is how I assign the audit frequency.

If you are interested, send me a PM with your e-mail address and I can share. Of course, you would have to modify it to fit your institution.

We also used excel, and set up the templates very similarly to how we set up our audit programs. Each risk area has its own tab, then there is a summary tab. That summary tab is what we use for the audit schedule.

I use excel like the one KYAuditor uses...