This could impact the integrity of the data stored on the application servers. A review of systems development procedures and controls would help to identify any weaknesses.

Our review will focus on the following areas:

• Vendor selection (if applicable).
• Programme specification involvement with users and management.
• Approval and authorisation of development requests.
• Prioritisation and tracking of development requests.
• Systems and user testing.
• Authorisation to transfer approved developments to the live environment.
• Updating technical documentation and user guides.