Purpose – The purpose of this paper is to analyse company-specific factors associated with adoption of risk-based auditing. It seeks to explore the role of internal auditing in enterprise risk management (ERM). Design/methodology/approach – Findings are drawn from a questionnaire survey,...