it-risk-assessment Blog Related Topics 
Audit Board
NOVEMBER 1, 2023
IT risk assessments can be a great way to gain insight into your organization’s IT environment, risks, and controls. Not only do IT risk assessments provide a comprehensive view of an organization’s security risk posture, but they also offer insights into the identification and prioritization of evolving threats.
Audit Board
JANUARY 4, 2023
As attacks grow in frequency and severity, organizations cannot take a “business as usual” approach to IT risk. The most successful companies have a simple process in place to capture the root cause of issues, establish corrective action plans, [and] continually focus on improving the GRC environment,” a PwC study of IT risk programs states.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Audit Board
AUGUST 3, 2023
This article originally appeared on the ISACA Blog. Information technology (IT) risk assessments focus attention on critical information assets, highlight connections between cyber threats and risks, and map key controls to known threats. Map business risks to relevant threats, controls, and assets.
ThomsonReuters
MAY 17, 2023
As we complete our examination of the impacts of SAS 145 for tax and accounting professionals, we’ll build on our previous posts on risk assessment , documentation and analysis , and balancing scope and complexity in auditing. The answer: those IT controls that impact the risk of material misstatement at the assertion level.
Harvard Corporate Governance
APRIL 1, 2023
Risk assessments are a critical component of a robust cybersecurity program. To benchmark their risk assessments and cybersecurity maturity reviews, companies often look to recognized industry standards such as the National Institute of Standards and Technology Cybersecurity Framework (“NIST CSF” or “the Framework”).
ThomsonReuters
NOVEMBER 2, 2023
It also revises the definition of significant risk so that auditors will be focused on where the risks lie on a spectrum of inherent risk. This new standard supersedes the existing guidance in AU-C 315A and amends other sections related to risk assessment and assessing control risk.
Internal Audit 360
MAY 25, 2023
GUEST BLOG POST A s the saying goes, you can’t audit what you don’t understand. And for auditing complex risk management processes, that idea can hit home for many internal auditors. So, what does “effective” mean when it comes to auditing risk management? A number of organizations also provide training on risk management.
Expert insights. Personalized for you.
52 
Let's personalize your content