> For the complete documentation index, see [llms.txt](https://engyon.gitbook.io/engyon/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://engyon.gitbook.io/engyon/en/frequently-asked-questions/risks-in-engyon/consistency-of-audit-units-on-risks-and-processes.md).

# Consistency of audit units on risks and processes

Question: why can you only select risks on a process that have at least the same audit units selected as the process?

Answer: A strict relationship applies between the audit units of a **process** and those of a **risk**, because internal controls are selected based on the process.

When a control covers only part of the audit units of a risk, part of the risk is controlled and part is not.

From this point of view, that is two separate risks.

A process appears in <kbd>Manage processes</kbd> only when it covers every audit unit of the risk and shares a line item. A process with no line item always fits. On a <kbd>Global risk</kbd>, Engyon skips the line-item check.

Once processes are linked to the risk, you can choose an audit unit only when it sits on every linked process. When those processes each cover a different audit unit, the picker shows `No matching audit units`.

There are two ways forward. Put the same audit units on one process and on the risk, then link that one process. Or create one risk per audit unit, with the matching process and the same line items.

One risk, processes that each cover a different audit unit, and all of those units on that risk, do not fit together. An internal control on one of those processes would then also apply to the other units.
