Project Management - auditor involvement

When reviewing the software development or acquisition process, the IT auditor or any auditor involved in the project should:-

• obtain the documentation from the various phases
• attend the project meetings
• offer advice to the project team on control and risk related issues
• assess the project team's ability to produce the key deliverables by the promised dates (in the project timeline or project plan
  

IT Project Fail Big Time

Federal IT projects aren't doomed to fail, but some do

Which IT Projects are successful?

A survey by the BCS (British Computing Society) shows that short e-business projects are most likely to be successful:

IT auditor and IT projects

Besides conducting audit, IT auditors are often involved in IT projects to ensure that adequate security and controls are considered and built into the systems regardless whether it is developed in-house or acquired from the vendor.

This involvement is to ensure that control issues are highlighted at the early stage as it might be costly too implement control when the system is already live, up and running.

The involvement is a preventive (pre-implementation), rather than detective (post-implementation).

The auditors should maintain its independence as stated in the iS Auditing Standards issued by ISACA.