Product Lifecycle Risk Audit Work Program
Driving Product Lifecycle Risk Awareness Through Structured Audit Focus
This sample work program reviews the risks in IT project planning and initiation, requirements analysis, design, development, testing, implementation and rollout, and post-implementation. For planning and initiation, some of the risk areas reviewed are system requirements specification, cost-benefit analysis, quality/time/cost, prioritization, methodology, and management approval and sponsorship.
Work program tasks include: determine the availability of technology required and company experience with IT; interview designers to determine how they assessed the ability of operational users to comprehend and use the system as planned; obtain a copy of effort estimates and review for reasonability in view of system functionality; and obtain estimating standards and determine how they were applied.