There are similarities between the role of internal audit and the role of the risk management function. In a healthy organisation risk management collaborates with internal audit and internal audit provides assurance over the activity of the risk management function.