Project documentation is the review of all relevant material related to the IT operation, application, program, and/or software and is generally not a significant part of an IT audit.

True False

When conducting a web server IT audit the auditor should ensure that the webserver has appropriate logging enabled and that monitoring processes are in place.

True False

A vulnerability in assessing risk could be the absence or weakness of cumulative controls protecting the asset(s).

True False