1. What is security auditing? Why is it necessary for system security?
2. What are the differences between security monitoring and auditing? Which is better?
3. What is risk? What is the purpose of calculating risk when analyzing security?
4. Give two ways in which risk can be calculated. Which is better?