As part of this risk assessment methodology, the CAE reviews the strategic plans of the company
and all the business units. The department’s efforts are then targeted toward the key areas and objectives upon which the company and each of the business units are focusing. To accomplish this objective, the auditors meet with executives at the various business units and walk through a questionnaire that they have developed as part of the risk-based assessment approach (see Exhibit5 for the questionnaire and the particular business risks and factors discussed).