• Identify at least three risks that auditors need to consider for companies that process web-based sales transactions, including credit card payments.
• For each risk identified, develop a mitigation risk strategy. Provide specific examples.
• identify specific controls and tests of controls related to IT governance, including:
  • Organizing the IT function.
  • Controlling computer center operations.
  • Designing an adequate disaster recovery plan.