The auditor used sampling to ensure that event logs recording information security events are maintained and regularly reviewed. Sampling was based on the audit...