Question: what is the difference between internal audit and risk management?
Answer: The main differences between the two So, I would say that one of the main differences is in the mindset: risk assessment is thinking about the (potential) things that could happen in the future, while the internal audit is dealing with how things were done in the past.