企业将对影响企业业务的不同类型的风险进行评估。为了发现和评估这些风险，管理层将由其内部审计师团队进行内部审计(internal audit.wsu.edu, 2016)。此外，当任命外部审计员对公司进行审计时，这些审计员也将采取步骤评估这些风险。外聘审计人员还将查明这种业务风险如何导致企业会计记录中重大错报的风险(会计简化)。Com, 2016)。
A business organization is established to attain certain objectives which might include production and sale of certain goods and services in order to earn profits. But there are certain risks which endanger the accomplishments of these goals. For example there are high chances of fraud being committed by an official of the organization leading to loss of cash of the firm. The high risk of such fraud could be because of inadequate internal controls. Other risk specific to the firm could be that it is using old technology to make products which might soon go obsolete leading to the considerable drop in its sales.
An enterprise would make an assessment of different types of risks affecting the business of the firm. In order to discover and assess such risks the management would conduct an internal audit done by its team of internal auditors (Internal audit.wsu.edu, 2016). Moreover when external auditors are appointed to conduct an audit of the firm, such auditors would also take steps to assess such risks. External auditors would also find out how such business risks would lead to risks of material misstatements in the accounting records of the enterprise (Accounting Simplified. Com, 2016).