Comprehensive policies and procedures addressing system development and change management activities have bee developed and documented.
Review and assess adequate controls of system development process to limit exposure to unauthorized or inappropriate activities.
Assess the adequacy of the risk assessment process to identify risks that could negativey impact an organization.
Verify that activities is processed in accordance with system development, change management process and district policies/procesures