SIA 310 is fundamentally about designing an audit that mirrors the DNA of the business. It recognises a critical reality that every business carries risk differently. Therefore, SIA 310 requires that internal audit planning must begin with one core principle: “Understand how this specific business creates, handles, and potentially loses value.” Only after this understanding should the audit plan be built. The Core Concept of SIA 310 SIA 310 introduces a risk-based, business