Reports on IT security and risk associated with IT processes

[senamuna]

I do Reports Development with Crystal Reports, Excel & host of other tools. Recently I am asked whether I am experienced in;

"Extracting information and building reports on IT security and risk associated with IT processes and procedures"

Could some expert in IT security advise me as what type of information this means and possible sources. I guess that it has to be by PMBOK or ITIL guidelines. But could not place it.

Thank you.