In this column, Ann describes a fraud situation that illustrates what happens when management and the auditor’s roles are fundamentally misunderstood and executed poorly. She then clarifies the definition and role of internal audit and explains elements of a risk management education program to help organizations ovecome myths surrounding the role of internal audit.