IT Examiner School eBook

Internal Use Only

IT Audit Risk Assessment

Universe of auditable entities (Population)

Risk assessment = audits

Reasonable scale (Scope)

Relevance of controls

Effectiveness of Controls

Inherent risk

Internal Use Only

The only scale where cyber risk should be rated second lowest