IT Examiner School eBook May 2025

Internal Use Only

Development and Acquisition

Internal Use Only

Development & Acquisition Learning Objectives

Senior Management & Board Oversight • Evaluate the effectiveness and adequacy of management’s oversight and support, including meeting objectives and user needs. Project Management Quality • Assess project management practices and processes for quality, efficiency, and alignment with business objectives. Change Control Practices • Review the adequacy and effectiveness of procedures for managing system changes. Source Code & Programming Controls • Determine the sufficiency and effectiveness of controls protecting the integrity of source code and programming activities. Additional Risk Considerations • Identify and evaluate other risks impacting system development, acquisition processes, and overall operational security.