Survey based risk assessment for processes, entities and enterprise

An audit system creates, deploys, and analyzes surveys to perform risk assessment. Surveys can be associated with one or more contexts, which include an enterprise, an organization, a business process, a risk, a control, or any combination thereof. The audit system generates survey questionnaires for a context automatically using a question library that associates questions with one or more contexts. Using the process library and the associated sets of process risks and process controls, the audit system can automatically determine the set of individuals that should participate in the survey. The audit system can then distribute survey questionnaires to the set of individuals and collect the survey results. Survey results can be aggregated to create risk assessments detailing the perceived risks to the survey context. Additionally, survey results and risk assessments can be saved for future reference or to document an enterprise's good-faith efforts to comply with its legal obligations.