What types of documents would an auditor review in testing organizational structure controls?

1. What types of documents would an auditor review in testing organizational structure controls?

Why is it also important to observe actual behavior?

2. What are some tests of physical security controls?

3. What are the often-cited benefits of IT outsourcing?

4. Define commodity IT asset.

5. Define specific asset.

6. List five risks associated with IT outsourcing.