The current focus of the audit is in the risk assessment. It is not required to carry out a financial audit to assess internal control and risks inherent to the operation of the organization.