- Identification of auditable operations;
- Identifying threats, risks inherent in auditable operations;
- Establishing criteria (factors) risk analysis and assessment of levels their
- Establish criteria for assessing the risk level;
- Determining the total risk score