The document discusses quality risk management (QRM) and its relationship to internal auditing. It outlines the typical QRM process, including risk identification, analysis, evaluation, control, communication and review. It notes that QRM can help address growing complexity, scope of risks, and external compliance requirements. The document proposes that QRM and internal auditing should be integrated to help organizations more efficiently meet requirements, improve communication, and master complexity through sharing of best practices and knowledge.