True/False: the functions of a pervasive control are to ascertain when policy violations occur and assess reports of risk and vulnerability.