Self-assessment is a process in which organizations utilize their internal knowledge to identify and assess uncertainties and the extent to which current practices are sufficient and appropriate. Self-assessment allows organizations to gain synergy by combining and collaborating the numerous ongoing risk management efforts; to increase mandates to identify, source, control and manage risk; and to integrate control and risk assessment activities into daily business practices.
In this tool, we have included two guides that outline the best-practice elements and processes related to developing and maintaining a self-assessment program. Topics include how self-assessment should be deployed, how to conduct an IT self-assessment survey, a self-assessment testing flow chart, an assessment life cycle, certification processes, key questions, and technology solutions.