Audit Report 0-15: Audit of SBA’s Proposed Systems Development Methodology
On March 30, 2000, the OIG issued audit report 0-15, Audit of SBA’s Proposed Systems Development Methodology. Based on a request from the Office of the Chief Information Officer (OCIO), the OIG reviewed and evaluated the SBA’s proposed System Development Methodology or SDM. While the plan generally meets widely accepted standards, the SBA’s SDM does differ with applicable guidelines, such as lack of an OIG role in the Initiate Project Phase, records management, and the need for the development of a vulnerability, threat, and safeguard matrix. The OIG made two recommendations.