CPR for internal auditors is an acronym designed to help internal auditors remember concepts for conducting better audits. The acronym represents conformance/compliance; process approach; and risk-based thinking.

Having conducted well over 700 audits, there are some patterns that have developed that are interesting to note.