Risk assessments is a key building block for numerous internal audit activities, deliverables, and communications such as periodic audit planning schedules, audit engagement planning memos, audit reports, ERM activities, and audit committee reports.