Provides a logical framework for evaluating information technology acquisitions. Incorporates a risk assessment methodology intended to reduce audit planning time and ensure that significant issues are included. Intended for use in planning and conducting risk assessments of computer hardware and software, telecommunications, and system development acquisitions. Charts and tables. Glossary.