O'Reilly logo

The CISA® Prep Guide: Mastering the Certified Information Systems Auditor Exam by John Kramer

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

6.1. Evaluation Approach

When tasked with the evaluation of a development effort, it will be very important to fully understand the scope and objectives for which your assigned review is intended. Is it to understand the efficiency and effectiveness of the software development that has already been concluded? Is it to opine on the overall process used by an organization for all development methods (therefore focusing on the methodologies involved with perhaps some samples cases used to validate the methods as examples)? As with all evaluation engagements, knowing the scope of the review will help set the boundaries and enable you to direct your resources appropriately on those tasks that are most likely to result in reaching the right areas of focus and meeting the needs of the business that is engaging you for the review. Generally, the type of review can be classified as either proactive—where you review the processes used before or at the initial stages of the process—or detective, where a review assesses performance after a project is completed. After-the-fact auditing, also referred to as bayoneting the wounded, is often less useful to those who need guidance most but is often used because management is not alerted to project problems until they are significant enough to appear on the radar. An internal audit organization might review the overall development methodology used as one of its regularly scheduled audits to avoid being put in the situation of a Monday morning quarterback ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required