Question: what is the difference between risk management and internal audit?
Answer: The main differences between the two So, I would say that one of the main differences is in the mindset: risk assessment is thinking about the (potential) things that could happen in the future, while the internal audit is dealing with how things were done in the past.