One approach is for supervisors to evaluate the work of the internal audit department of the bank, including its testing of senior management’s processes that identify, measure, monitor and control risks.
If satisfied with the quality of the internal audit department’s work, supervisors can use the reports of internal auditors as a primary mechanism for identifying control problems in the bank, or for identifying areas of potential risk that the auditors have not recently reviewed.