1. The _____________ includes all the auditable resources or auditable components within an organization.

		IT universe
		network map
		network inventory
		audit objective

2.

I.Defined roles and responsibilities II. Configuration and change management III. Environments for development test and production IV. Segregation of duties V. Identity and authentication VI. Principle of least privilege VII. Monitoring, measuring, and reporting VIII. Appropriate documentation The above are all principles of:

		A security audit
		A compliance assessment
		Privacy management
		Defining security controls

3. The following are examples of objectives: I. Examine the existence of relevant and appropriate security policies, and procedures. II. Verify the existence of controls supporting the policies. III. Verify the effective implementation and ongoing monitoring of the controls. The above objectives are part of a(n) __________.

		compensating control
		IT audit
		gap analysis
		risk assessment