Risk Assessments

I need to get started on completing Internal Audit Risk Assessments.  I am thinking about completing a risk assessment after each audit this year instead of all at once.  That would be very time consuming!Can anyone tell me if you purchased a product or developed your own spreadsheet using the control risks such as Inherent, Transaction, Regulatory etc and risk ratings high, medium or low? Thanks.