The results of this risk-assessment process will enable you to develop alternative internal audit plans to address a variety of risks across your organisation. An effective audit plan provides a systematic means to assign risks into high, moderate and low categories. Once risks are assessed, the chief audit executive should work with the audit committee and senior management to prioritise organisational risks and determine the competencies and skill sets needed in the internal audit function to address high-priority risks and key stakeholder needs