Methodology

The Office of Internal Audit has established a methodology by which risk rankings (ratings) and opinions can be
consistently applied and meaningfully interpreted by all stakeholders.  Thus, these risk rankings and opinions will
reflect the internal control environment of the audit area and also provide an opinion for management that assesses
the adequacy, effectiveness and efficiency of internal controls for the audit area.

Risk Ranking & Engagement Opinion Methodology