ITPEC FE Morning April 2023 Question 59
ITPEC FE Morning April 2023 — Question 59 of 80
The correct control point is checking whether the user department participates in the review of system design documents (d).
Since the goal is to reduce the risk of user requirements not being met, the most direct control is verifying that the people who defined the requirements are involved in reviewing the design.
Why not others:
- (a) Programming follows conventions and standards — this is a programming-phase control, not a design-phase control
- (b) Program specifications based on system design documents — this verifies consistency at the programming phase, not whether user requirements are reflected in the design
- (c) Test plan based on system test requirements with operations manager approval — this is a testing/operations-phase control, not a design-phase control
Key rule: When an audit targets the design phase for user-requirement risk, the check must confirm that the user department reviews the design output — the people who set the requirements must verify the design.
AI-generated — may contain errors
The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official FE past-paper collection or Report an issue.