What is the purpose of the auditor's review of SDLC documentation?
In reviewing the SDLC documentation, the auditor seeks to determine that completed projects now in use reflect compliance with SDLC policies including:
• User and computer services management properly authorized the project.
• A preliminary feasibility study showed that the project had merit.
• A detailed analysis of user needs was conducted that resulted in alternative conceptual designs.
• A cost-benefit analysis was conducted using reasonably accurate figures.
• The detailed design was an appropriate and accurate solution to the user's problem.
• Test results show that the system was thoroughly tested at both the individual module and the total system level before implementation. (To confirm these test results, the auditor may decide to retest selected elements of the application.)
• There is a checklist of specific problems detected during the conversion period, along with evidence that they were corrected in the maintenance phase.
• Systems documentation complies with organizational requirements and standards
You might also like to view...
Which of the following data collection modes allows for recruitment and training to be conducted at a central location, monitoring of the actual interviews by a supervisor, checking completed interviews "on the spot" and offers control of
interviewers' schedules? A) drop-off survey B) CATI or CAPS C) central location telephone interviewing D) traditional telephone interviewing E) in-office interviewing
Rubery (1978) argued that labour markets were not just structured by the actions of employers, but also ___________.
a. The actions of managers b. The ability of labour to maintain, develop, extend and reshape their organization and bargaining power c. The ability of capitalists to control management, who in turn controlled labour d. None of the above
Strategic goals
A. include fostering quantity and quality of outputs as well as increasing productivity. B. identify the specific procedures and processes required at lower levels of the organization. C. translate broad tactical goals and plans into specific goals and plans relevant to a particular portion of the organization. D. should be limited to top management. E. focus on the major actions a unit must take to fulfill its part of the strategic plan.
Which of the following statements about interest-only mortgages is not true?
A) Interest-only mortgages cannot be Qualified Mortgages under The Consumer Financial Protection Bureau's rules. B) Mortgage payments may increase abruptly. C) Interest-only mortgages allow the borrower to pay only interest for the life of the mortgage. D) Interest-only mortgages were popular before the financial crisis.