State whether each of the following statement is TRUE or FALSE. 1. Conducting an audit is a systematic and logical process that applies to all forms of information systems. 2. Fault tolerance is the ability of the system to continue operation when part of the system fails because of hardware failure, application program error or operator error. 3. The auditor should not verify the copies of critical applications and operating systems which are stored off-site. 4. Business managers working with information systems specialists should try to determine the value of information assets, points of vulnerability, the likely frequency of a problem and the potential for damage. 5. User test and acceptance is part of detailed system design phase of the system development life cycle. 6. Validity checks compare actual values in a field against known acceptable values. 7. Control testing techniques provide information about the accuracy and completeness of an application's processes. 8. COBIT is designed not to be complementary to, and used together with, other standards and good practices. 9. Computer security is an attempt to allow such undesirable events as a loss of confidentiality or data integrity. 10. Ethical issues in business can be divided into four areas: equity, rights, honesty and the exercise of corporate power. E-commerce is the purchasing and selling of goods and services over an electronic network, as well as the transmission of payments and data. Assume Berjaya Sdn Bhd utilizes an Ecommerce platform to sell stationery items and accept credit card payments. a) List TWO (2) major security threats to Berjaya Sdn Bhd E-commerce website. (2 marks) b) Briefly explain ONE (1) risk that can lead to loss of strategic advantage to Berjaya Sdn. Bhd if the E-commerce website developed was outsourced by the vendor