Audit Report 0-15: Audit of SBA’s Proposed Systems Development Methodology
On March 30, 2000, the OIG issued audit report 0-15, Audit of SBA’s Proposed Systems Development Methodology. Based on a request from the Office of the Chief Information Officer (OCIO), the OIG reviewed and evaluated the SBA’s proposed System Development Methodology or SDM. While the plan generally met widely accepted standards, the SBA’s SDM differed with applicable guidelines, such as lack of an OIG role in the Initiate Project Phase, records management, and the development of a vulnerability, threat, and safeguard matrix. The OIG made two recommendations.