• terms of reference defining the purpose and scope of the audit;
• criteria for deciding the correctness of products and processes such as contracts, plans, specifications, procedures, guidelines and standards;
• software products;
• software process records;
• management plans defining the organisation of the project being audited