Considering the concepts of organization wide risk management and the system of internal controls, the...

The internal audit activity can be considered a type of governance control. Governance controls are those that are designed to ensure that the overall direction, administration, and control of an organization are maintained. The internal audit provides assurance on the effectiveness of governance, risk management, and internal controls.

The IIA's guidance on the role of internal auditing in enterprise-wide risk management.