The Office of Internal Audit has established a methodology by which risk rankings (ratings) and opinions can be consistently applied and meaningfully interpreted by all stakeholders. Thus, these risk rankings and opinions will reflect the internal control environment of the audit area and also provide an opinion for management that assesses the adequacy, effectiveness and efficiency of internal controls for the audit area.