Software Development Audits

Based on COBIT and IEEE

(4 days)

This course is for audit/assurance, IT managers, project managers, consultants, information security, configuration management, software maintenance, business analysis, software designers and executive managers.

Delegates should have worked on at least one major IT system in a development, operational, or audit capacity.

This course will enable delegates to conduct both high level and detailed audits on the entire Software Development Life

Cycle (SDLC) from requirements specification through to implementation and the supporting disciplines of project management, quality assurance, configuration management and documentation

 It will cover Software Design Descriptions (SDDs), the Software Configuration Management Plan (SCMP), the process for managing and executing software maintenance activities, the format and content of software quality assurance plans and, finally the software Verification and Validation (V&V) processes that determine whether development products for a given activity conform to the requirements of that activity, and whether the software satisfies its intended use and user needs.

Creating the Audit

• Benefits of an IT Audit,
• COBIT and IEEE Standards,
• Audit Questionnaires,
• Customising the questions.

Specialist Subjects

• The Software Requirements Specification (SRS) using the IEEE Software Engineering Standard 830 – 1998
• Software Design Descriptions SDDs) based on IEEE Software Engineering Standard 1016 – 1998
• The Software Configuration Management Plan (SCMP) using IEEE Software Engineering Standards 828 – 1998
• Software Development Lifecycle using relevant IEEE Software Engineering Standards
• Software Maintenance to IEEE Software Engineering Standard 1219 – 1998
• Software Quality Assurance using IEEE Software Engineering Standard 730 – 2002
• The Software Verification and Validation (V&V) processes to meet IEEE Software Engineering Standard 1012 – 1998.
• This will determine whether development products of a given activity conform to the requirements of that activity and whether the software satisfies its intended use and user needs.

Implementing the Audit

• Scoring systems,
• Supporting evidence,
• Developing a Remediation Plan,
• Implementing the Remediation Plan,
• Continuous Improvement Programme.