CFOs are likely to use internal audit to address key risks in their areas of responsibility, potentially excluding other areas of risk.