ITPEC FE Morning April 2023 Question 59
In the system design phase, when an audit is performed on the control to reduce the risk of user requirements not being met, which of the following is a point to be checked?
Explanation
The user department takes part in reviewing the system design documents — the design-phase control that checks the users' requirements are actually in the design.
The risk is that the system being designed will not do what users need. In the design phase the deliverable is the system design document, and the people who can judge whether it meets the requirements are the users who stated them. So the auditor checks that the user department participates in the design reviews.
Answer (d)
Why not others:
- •(a) — following programming conventions and standards is a programming-phase control for code quality and maintainability
- •(b) — deriving program specifications from the design keeps programming consistent with the design, but if the design already misses a user requirement, the error is passed on
- •(c) — a test plan approved by the system operations department is a test-phase control that involves operations staff, not the users
Key rule: Match the control to the risk and the phase: to catch unmet user requirements, have the users review that phase's deliverable.
System Audit · AI-written, may contain errors
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official FE past-paper collection or Report an issue.