9.2 Internal audit

The entry refers to clause 9.2 of ISO 31000:2018, which outlines the role of internal audit in risk management. It describes how internal audit provides independent assurance on the effectiveness of the risk-management framework, evaluates compliance with policies, and recommends improvements to enhance risk-based decision-making.