The newly appointed IT Director of the ICT Berhad, one of the computer processor manufacturers located at Bukit Kayu Hitam, Mr. Kassim Baba, found that the system development life cycle (SDLC) is outdated. He also found that the documentation was too dense, too difficult to follow, and lacked of sufficient flexibility. The company needs a thorough and sensible methodology that would ensure the successful implementation of a wide variety of information technology systems, including the single and multiple releases, custom solutions, and hardware and software acquisitions.

Mr. Kassim Baba and his team of project managers have collaborated with Mr. Ali Abdullah, the chief internal auditor (CIA) of the ICT Berhad, and a few internal audit executives from the IAD to evaluate over 100 requirements in the SDLC enhancement project. One of the tasks that need to be completed by them is to review the SDLC documentation. This team has developed an improved methodology which is more consistent with the common standards and flexible enough to meet the needs of the companys diverse project. Further, they went above and beyond the original scope by developing a custom-designed, web-based SharePoint for the publication of the enhanced SDLC. This additional element would increase visibility and usability for project managers and their stakeholders. The enhanced companys SDLC will allow project managers, stakeholders, and audit executives to easily follow a methodology that will maximise project outcomes and minimise project risks.

In addition, Mr. Ali Abdullah and his team also develope an audit plan to review the companys systems development procedures. Their audit objectives are to ensure that:

i.The system is judged necessarily and justified at various checkpoints throughout the SDLC; ii.Systems development activities are applied consistently and in accordance with companys policies to all systems development projects; iii.The system as originally implemented is free from material errors and fraud; and iv.System documentation is sufficiently accurate and complete to facilitate audit and maintenance activities.

REQUIRED:

(a)Explain FIVE (5) reasons for the need of the internal auditors of ICT Berhad to review the SDLC documentation?