Another tool widely applied is Deloitte's INVision® a Web-based configurable database. This platform supports a number of interrelated modules, which can be used separately or in combination as part of an integrated enterprise risk assurance tool-set.

These modules include:

• Operational Risk Management - a complete operational risk management functionality, incorporating risk identification framework, risk diagnostics, risk self-assessment, scorecards, and risk profiling.

• Internal Audit methodology - the tool supports all phases of the internal audit methodology, as described above, including electronic workpapers, document management, and smart audit support.

• Specialist modules for information technology risk analysis including BS7799 and COBIT assessments.