The internal Audit helps in risk assessment are they looking at if controls are subject to risk and how to manage it or do they also look business risk like intrest rate risk, etc
It depends on their remit – whereas external/statutory auditors have legal responsibilities – internal audit is generally whatever management/TCWG need it to be.
That said, in some specific jurisdictions (and therefore not examinable), a board of directors of a listed company is required to appoint an internal auditor who is responsible for risk management (amongst other things). Risk management in this context is indeed things like exposure to interest rate risk, etc.