How effective are your systems of governance, risk, and control/compliance (GRC)?
The majority of internal audit functions perform a variety of audits every year and provide an opinion (ideally) or at least a list of risk-ranked weaknesses (far less than ideally) on the scope of each audit.
