We examine whether internal auditing provides value to organizations by reducing risk. We compare the changes in risks between audited business units and matched non-audited units within the same company. This design allows us to isolate the importance of an internal audit while holding constant...