Watch this video on YouTube
When developing a risk-based audit strategy, what should an IS auditor conduct a risk assessment for?