a. What is the purpose of auditing? b. Distinguish between log files and documentation. c. Why is the avoidance of compliance a serious red flag? d. Distinguish between internal and external auditing....

a. What is the purpose of auditing? b. Distinguish between log files and documentation. c. Why is the avoidance of compliance a serious red flag? d. Distinguish between internal and external auditing. e. Why is regularly scheduled auditing good? f. Why are unscheduled audits done?

a. What is a vulnerability test? b. Why should you never engage in a vulnerability test without a signed contract? c. What should be in the contract? d. What should you look for in an external vulnerability testing company? e. Why is follow-up needed on recommended fixes?