Companies lose over $100 billion a year due to corporate scandals. Where were the internal auditors? Think about the VW diesel emissions scandal, the Yahoo hacking scandal, the BP oil spill scandal or the Petrobras corruption scandal. When the 1st and 2nd Lines of Defence failed to prevent these scandals, could the 3rd Line of Defence, the Internal Auditors, have prevented these? The answer can be yes, if those Internal Audit Functions would have managed their audit risks. The Beumer Audit Risk Management Model© shows the strategic audit risk management framework for the audit risk identification, measurement and mitigation. The model connects 60 audit risks, in 6 audit risk categories, to 30 audit objectives. Depending on the audit risk appetite and the audit risk prevention, the CAE can apply up to 66 audit risk mitigation measures for reducing the audit risks to an acceptable level.