System Developement

Business application system/software is designed to support a specific organisational service, function or process, such as inventory management, payroll, market analysis or e-commerce. What is the goal of such a business application?

• To enhance the targets and goals of an organisation

• To deal with problems relating to business processes

• To enhance quality of services

• To turn data into information

What is the intent of SDLC?

• To process data of relevant business processes

• To enhance the targets and goals of an organisation

• To improve the quality of services

• To examine a business situation and improve it

Which of the following is the role of an IS Auditor in Phase 3 (System Analysis) of SDLC?

• Review cost justification/ benefits

• Review detailed requirement definition documents

• Verify that the management has approved the initiation and cost of the project

• Review existing data flow diagrams and other related specifications

Which of the following is the role of an IS Auditor in the detailed design phase of SDLC?

• Analyse the justification for going in for a development or acquisition

• Review input, processing and output controls

• Ensure that the documentation is complete

• Review QA report on adopting coding standards by developers

What are the characteristics of a very well coded application program?

• Good coding standards, Accuracy and Speed

• Reliability, Robustness, Accuracy, Efficiency, Usability, Readability

• Flexibility, Speed, Coding Standards

• Reliability, Flexibility and Speed

What is the role of an IS Auditor in the testing phase of SDLC?

• Review the test plan for completeness and correctness

• Ensure test plans, test data nd test results are maintained for reference

• Verify that the system has been installed according to the organisation’s change control procedures.

• Review programmed procedure used for scheduling and running the system along with the system parameters are used in executing the production schedule

What are the security steps involved in the development phase of SDLC?

• To identify possible attacks and design controls

• To train developers on security coding practices

• To ensure security requirements are tested during testing

• To perform security scan of application after implementation

Which of the following is a mitigation plan for risk associated with compromising on quality and testing?

• Understand organisation baseline for infrastructure and incorporate in design.

• Ensure standard coding practices are adopted.

• Ensure completion of documentation along with design and development.

• Ensure documentation experts and technical writers are part of team.

What is the mitigation plan for risk associated with absence of skilled resources?

• Consider outsourcing or hiring skilled resources on contract

• Develop and implement standard coding practices

• Perform scope base lining.

• Introduce change management process to evaluate and adopt changes in requirements

Who is responsible for delivery of a project within the time and budget?

• Module/Team leader

• System Analyst

• Project Manager

• Database Administrator