Checklist and matrix for developing an enterprise wide risk assessment. This is a framework and will require the auditor to enter the detailed information based on organizational structure and needs.