Internal audit (IA), like risk itself, is often misunderstood. The profession has historically suffered from unfavorable perceptions, often being seen as a policing body or as a group of scolds who swoop in to report on what went wrong. However, a more progressive and expansive definition of