One of the key elements to becoming a successful internal auditor is the development of an audit plan for new or revised organizational risk units. This project forces students to move away from SALY (Same As Last Year) auditing and think about the business process, risks within the business process, and the methodologies management uses to control or share risks, and to develop audit tests to examine the effectiveness of design and operation of those methodologies.