All courses · Volume 6

Auditing the System Development Life Cycle

From business case to go-live: project governance, secure development, data migration and go-live readiness, in waterfall, agile and SaaS projects.

See the packsWhat's inside
20slides with notes
3Excel exercises
2026standards

What you will be able to do

Learning outcomes

  • Explain how the auditor's role differs across waterfall, agile and SaaS implementations
  • Assess project governance and whether controls are built into requirements
  • Apply secure development practices from the NIST Secure Software Development Framework
  • Test data migration completeness and accuracy, and go-live readiness
  • Give assurance during a project while keeping your independence

Part 1: Governance and delivery

What changes for the auditor · Is the project in control of itself? · Build controls in, from the start

Part 2: Building it securely

The NIST Secure Software Development Framework · Which tests, and who signs them off · Code nobody on the team wrote

Part 3: Going live

Moving the data without losing or changing it · Ready means evidenced, not hoped for · The project is not over at go-live · Auditing a system implementation · Six ways project audits go wrong

20-slide course deck

Every slide has full speaker notes, a worked audit finding, a knowledge check and current sources.

Participant workbook

Notes pages, a finding template, a 10-question knowledge check and a glossary.

Excel exercises

Reconcile a data migration. Compare supplier bank details field by field. Test go-live criteria against a defect log. All data is fictional.

Pricing

Choose your pack

Learner Pack

£29 one-off

For self-study and auditors building their skills.

  • Course deck (PDF, 20 slides)
  • Participant workbook
  • Excel exercise file
  • Single-user licence
Buy the Learner Pack

Secure checkout by Stripe. Files are emailed within one working day. Want all six courses? See the ITGC Complete bundle.