control gap identification, control gaps, Internal Audit, Risk Assessment, internal audit observations, Audit Process, Risk Advisory, Internal Audit Plan