Risk assessment is a phrase used to describe the process of identifying and estimating the exposure to real and potential risks. Forensic testing is colorful shorthand to refer to periodic tests used to evaluate the effectiveness of controls. However, the application of these notions goes beyond the simple definitions since risk assessment and forensic testing are pillars for a sound compliance program.

---

{Jscribd document_id:=21665704 access_key:=key-im4j61m944boylm2hxj viewmode:=List h:=500 w:=690}