The difference between risk assessment and an IT security audit is that risk assessment is the process of assessing security$-$related risks to an organization$$s computers and networks from both internal and external threats. Whereas a security audit evaluates whether an organization has a well$-$considered security policy in place and if it is being followed. True False