The World Bank Technology Risk Checklist
For what it's worth. From a cissp-forum posting by Gideon T. Rasmussen:
"The World Bank Technology Risk Checklist is designed to provide Chief
Information Security Officers (CISO), Chief Technology
Officers (CTO), Chief Financial Officers (CFO), Directors, Risk Managers
and Systems Administrators with a way of measuring and validating the
level of security within a particular organization."
http://www.infragard.net/library/pdfs/technologyrisklist.pdf (31 pages)