INTERNAL AUDITRISK MANAGEMENT
Hi all,I am wondering about the sample size that you use when auditing Vendor Managment. Do you look across all risk levels or mostly concentrate on Level 1 and 2 vendors. I don't want to get too bogged down in this area as it is my first time out.