Enterprise Risk Management And Internal Audit

By analyzing the concept of Risk Management,demonstrating the global representative framework of Enterprise Risk Management,considering the requirement of Sarbanes-Oxley Act (SOX) and China's State Council "Direction"(中国国资委《中央企业全面风险管理指引》), the article designed a standard constructing process of building up the Risk Management framework for modern enterprises.It also helps enterprises to identify the cause of the great loss brought to them,and narrates in detail how to control and manage those risks in practice. At the same time when enterprises take up the framework of risk management,Modern Internal Audit becomes an indivisible part of it.By illustrating the concept of Internal Audit and the relationship between internal audit and Risk Management,this article emphasizes the responsibility and great function have been taken by internal audit in modern Enterprise Risk Management.The author summarizes the insufficient application of Risk Management and Internal Audit in our country when compared with that in Global.Finally,with the detail analysis of the case of "BaoSteel Development Ltd,.Co"(宝�'�发展有限公司) to approve the effectiveness of the method to build up the risk management framework,the author assumes and appeals for a further development of Risk Management and Internal Audit in the China's further.