2023 IT Examiner School

IT Audit Risk Assessment

Universe of auditable entities

Risk assessment = audits

Reasonable scale

Relevance of controls

Effectiveness of Controls

Inherent risk

The only scale where cyber risk should be rated second lowest