An internal audit is an independent evaluation of an organization's internal controls, risk management processes, and governance practices, conducted by internal auditors to ensure compliance with laws and regulations, improve operational efficiency, and enhance the effectiveness of risk management.