Risk Assessment - Level 2 Planning and Organisation

KEY
A. No Controls exist
B. The effectiveness of the internal control is POOR (eg the internal control/item/process is seldom or never performed
C. The effectiveness of the internal control is MODERATE (eg the internal control/process/items is sometimes performed)
D. The effectiveness of the internal control is GOOD (eg the internal control is performed most of the time)
E. The effectiveness of the internal control is VERY GOOD (eg the internal control/item/process is always performed)
F. Option is not applicable

IT INVESTMENT

1) Inadequate Management of IT Investments
A.
B.
C.
D.
E.
F.

1.1 Have an Annual Operating Budget been developed?

1.2 Are the Cost Benefits and Management monitored?

1.3 Is there a Cost Benefit Justification for each Project/ upgrade?

Click here to return to Risk Assessment

 
Website Designed and Hosted by Grey Pebbles Design Studio | Sitemap