Discussion question with minimum of 300-400 words

 1. Discuss the importance of: “Identifying and prioritizing risks is a key component of the audit plan”. Is there a process to follow? 

 2. Discuss this statement: “Establishing baselines and identifying an acceptable level of risk across the environment provides a starting point for the actual audit”. How is this statement true? Where would you start your development of a baseline?