Internal audit has two key roles to play in relation to organisational risk management: ? Ensuring the company's risk management system operates effectively ? Ensuring that strategies implemented in respect of business risks operate effectively As a significant risk management policy in companies is to implement internal controls, internal audit has a key role in assessing systems and testing controls. Internal audit may assist in the development of systems. However, its key role will be in monitoring the overall process and in providing assurance that the systems which the departments have designed meet objectives and operate effectively. It is important that the internal audit department retains its objectivity towards these aspects of its role, which is another reason why internal audit would generally not be involved in the assessment of risks and the design of the system.