Self-assessment is a recognized best practice and has been applied to risks and controls for many years. When systematically applied across the organization at the entity and process levels, self-assessment is a pre-determined approach whereby individuals self-review or self-audit the controls for which they are responsible and communicate the results to appropriate management. The intent of this training document is to assist control owners, process owners and internal audit with implementing and executing the self-assessment process focused on IT controls.