What is the appropiate role of internal audit activity with regard to Risk Management?

Internal audit role is best suited for Risk Management function within an organization.  However, one must know that it is not the job of internal audit function to provide Risk Management, but to highlight weaknesses in all areas of management that give rise to or fuel risks, or are inadequate to manage risks.