Information Technology (IT) has become an integral function of doing business in the information age of today. Organisations, including local government, make use of IT to ensure that their business objectives are met. The effective use of IT, within the context of local government, can enhance the way in which service delivery is administered. However, the use of IT within local government presents a number of significant risks. Thus, it is of paramount importance to ensure that IT is governed and managed accordingly. At the core to the governance of IT is the process of managing IT risks. To achieve effective risk-management, an adequate risk-assessment must be conducted within the given context. The Auditor-General of South Africa has identified the lack of adequate risk-assessment within local government. The aim of this research paper is, consequently, to present a scenario-based IT risk-assessment that is scalable to the local