Develop appropriate risk assessment matrices to be used as a guide in the process of identifying inherent risks and internal/management control risks within the assigned auditable areas