AuditNet
There are free templates available for establishing a risk assessment and compliance universe. Perform a search on the templates page and then download those where the description fits your needs. You will have to modify to fit within your organizations universe.
