Information Risk Analyst (IT Controls Audit) will help the organization assess risk controls and their effectiveness for current and future design improvements. To be successful in this career path YOU must be familiar with the concept Information Risk.

a. Explain the term 'information risk' (2 marks)

b. Discuss three (3) causes of information risk. (6 marks)

c. Discuss the three (3) main ways to reduce information risk. (6 marks)

d. Differentiate between 'assurance services' and 'non-assurance services,' giving examples of each. (6 marks)