Risk Assesment/Audit




I am looking for the latest techniques used for conducting a Risk Assesment,
Scoring etc inorder to put together a plan of audit. Also, basic control
security testing methodology for todays networks that i could apply to a
number of scenarios.