Moreover, it is possible to identify a few large companies (8 per cent), in which the
internal audit unit is also focused on consulting activities. Internal auditors attempt to
add value through a more active support to risk management at different levels, and to
align internal audit objectives with the strategic goals of the organisation. This group
includes the “early pioneers” in control and risk self assessment (CRSA) projects, in so
far as they aim at strengthening the accountability at all levels of management for risk
and control. They focus their work on significant risks, and they are trying to adopt a
collaborative approach with line management. A risk-based approach is applied both
at macro and micro levels, so that we can assume that they are embracing the risk
paradigm as suggested by Selim and McNamee (1998). Furthermore, internal auditors
focus on monitoring activities and soft controls.