IT Examiner School

IT Audit Risk Assessment

Universe of auditable entities

Risk assessment = audits

Reasonable scale

Inherent risk Relevance of controls

Effectiveness of Controls

The only scale where cyber risk should be rated second lowest