Self-assessment is a process in which organizations utilize their internal knowledge to identify and assess uncertainties and the extent to which current practices are sufficient and appropriate. Self-assessment allows organizations to gain synergy by combining and collaborating the numerous ongoing risk management efforts; increase mandates to identify, source, control and manage risk; and integrate control and risk assessment activities into daily business practices. 

In this tool, we have included three guides that outline the best-practice elements and processes related to developing and maintaining a self-assessment program. Topics include how self-assessment should be deployed, how to conduct an IT self-assessment survey, a self-assessment testing flow chart, an assessment life cycle, certification processes, key questions and technology solutions.