To perform a comprehensive risk assessment of the City's information technology environment and develop a multi-year IT audit plan based on the results of the risk assessment.