IT Examiner School eBook

Internal Use Only

Development Standards

• Project management standards should address issues such as project management methodologies, risk management procedures, and project approval authorities. • Roles & responsibilities that establish SoD Separation of duties within the development team controls for “test” and “production” environments. • System control standards should address items such as an application's functional, security, and automated control features. Organizations should have written development standards that, at a minimum, address project management, roles and responsibilities, system control, change control, testing and documentation.

Internal Use Only

Development Standards • Change control standards to ensure modifications do not disrupt operations or degrade a system's performance or security, organizations should establish appropriate change management standards and procedures. • Testing standards that requires organizations to complete various tests to ensure the accuracy of programmed code, the inclusion of expected functionality, and the interoperability of applications and other network components. • Coding standards are that set coding rules, guidelines, and best practices. • Documentation standards that require programmers to document completed programs and test results thoroughly.