Annual IA Risk Assessment

I'm looking to revamp my annual risk assessment (used to support my annual audit plan).  Is anyone willing to share their process, spreadsheet/format?

Appreciate your time!