Enhancing IT audit risk assessment: A comprehensive model using bow-tie and fuzzy Bayesian networks

This academic paper presents a new model for IT audit risk assessment that combines bow-tie analysis (a visual diagram showing how failures can happen and their consequences) with fuzzy Bayesian networks (a statistical method that handles uncertain or imprecise information to calculate probabilities). The model aims to help organizations better identify and evaluate security risks during IT audits by combining these two analytical approaches.