AUDIT AND RISK ASSESSMENTS To further validate our externally-validated standards, Leidos Internal Audit has developed an Information Technology Risk Assessment Framework (ITRAF) and a Cybersecurity Risk Assessment Framework (CS-RAF).