Risk audits identify and quantify risks to which an organisation is exposed.