IT Examiner School - Oct 2023

Internal Use Only

IT Audit Risk Assessment

Universe of auditable entities

Risk assessment = audits

Reasonable scale

Relevance of controls

Effectiveness of Controls

Inherent risk

7

Internal Use Only

The only scale where cyber risk should be rated second lowest

8