QUESTION 8

Project documentation is the review of all relevant material related to the IT operation, application, program, and/or software and is generally not a significant part of an IT audit.

True

False

QUESTION 9

When conducting a web server IT audit the auditor should ensure that the web server has appropriate logging enabled and that monitoring processes are in place.

True

False

QUESTION 10

A vulnerability in assessing risk could be the absence or weakness of cumulative controls protecting the asset(s).

True

False