About this article: This article is published with the kind permission of the Institute of Internal Auditors. It first appeared in IIA’s journal, Internal Auditing, in 1999. Critical Risk Self Assessment (CRSA) has evolved since then, but the article is of relevance to those Students undertaking the NVQ/SVQ in Internal Audit.

CRSA is one of many tools...