Please enable JavaScript.
Coggle requires JavaScript to display documents.
3.3(3) (IS AUDITOR REVIEW ON managements discipline over SDLC PORCESS (•…
3.3(3)
-
Use of Structured Analysis, Design and Development Techniques
IS auditor should be particularly concerned with processes is well defined, documented and followed when using the traditional SDLC approach to business application development.
techniques PROVIDES FRAMEWORK FOR IDENTIFYING AND REPRESENTING THE DATA PROCESS COMPONENTS of an application using various graphic notations at different levels of abstraction,
-
-
-
Software Baselining
-
when org. use this
USER REQUIREMENTS ARE REVIEWED item by item, and considered IN TERMS OF TIME AND COST & VARIOUS TYPE OF RISK
change does not occur without undergoing FORMAL STRICT PROCEDURES FOR APPROVAL BASED ON COST BENEFIT IMPACT ANALYSIS .
-
also relates to the point when formal establishment of the software configuration management process occurs.
-
Design
-
-
depending on complexity , iteration required to get the detailed status so that developing activity (coding) can start
design phase activities
• Developing system flowcharts and entity relationship models to illustrate how information will flow through the system :linked_paperclips:
• Determining the use of structured design techniques that show various relationships from the top level down to the details #
-
-
-
-
• PREPARING PROGRAM SPECIFICATIONS for various types of requirements or information criteria defined
-
• Developing DATA CONVERSION PLANS to convert data and manual procedures from the old system to the new system
-
-
-
-
-
A context diagram is a graphical representation of a system which must only use one process to represent the entire system and deliberately does not go into defining all the processes so as to prevent people getting bogged down in complex details at an early stage.
-