Item yes response no kd includes the following reasons

Info iconThis preview shows page 1. Sign up to view the full content.

View Full Document Right Arrow Icon
This is the end of the preview. Sign up to access the rest of the document.

Unformatted text preview: statement of the nature and scope of the project IT Audit Manual Volume III 19 IT Audit Manual No. Item Yes Response No KD • includes the following reasons for undertaking the project: • a statement of the problem to be remedied or process to be improved • a statement of the need for the project expressed in terms of enhancing the organisation's ability to achieve its goals • an analysis of the deficiencies in relevant existing systems • the opportunities that would be provided for increasing economy or efficiency of operation • the internal control and security need that would be satisfied by the projects • addresses the manner in which proposed project feasibility studies are to be prepared, reviewed and approved by senior management, including the: • environment of the project - hardware, software, telecommunications • scope of the project - what it will include and exclude in the first and following implementations • constraints of the project - what must be retained during this project, even if short-term improvement opportunities seem apparent • benefits and costs to be realised by the project sponsor or owner/sponsor • delineates the manner in which each phase of the development process (i.e., preparation of feasibility study, requirements definition, system design, etc.) is to be approved prior to proceeding to the next phase of the project (i.e., programming, system testing, transaction testing, parallel testing, etc.) • requires the development of an SPMP for each project and specifies the manner in which control will be maintained throughout the life of the project, and project timeframes (milestones) and budgets IT Audit Manual Volume III 20 IT Audit Manual No. 102 103 104 105 106 107 Item Yes Response No KD • complies with either the organisation standard for SPMPs or, if none exists, an appropriate standard is used • requires the development of an SQAP for each project and ensures that this is integrated with the SPMP and formally reviewed and agreed to by all involved parties • • delineates the manner in which the formal project risk management programme eliminates or minimises the risks associated with the project • provides for the development of a test plan for every development, implementation and modification project • provides for the development of an adequate plan for training the owner/sponsor staff and IT staff for every development, implementation and modification project KD Reference: _...
View Full Document

Ask a homework question - tutors are online