Scope Access control process [Provide additional information here on the scope] The scope of the audit is to cover risk assessment. The assessment of risks posed by external and internal sources Process flow [Provide additional information here on the scope] Configuration management process [Provide additional information here on the scope] Contingency planning process [Provide additional information here on the scope]