Deze scriptie is geschreven door beide op persoonlijke titel

Acquire and maintain application software (AI2)Control objective: controls provide reasonable assurance that application and system softwareis acquired or developed that effectively supports the business requirementsIllustrative controlsThe organization has a system development lifecyclemethodology (SDLC), which includes security andprocessing integrity requirements of the organizationThe organizations SDLD policies and procedures considerthe development and acquisition of new systemsor major changes to existing systemsThe SDLD methodology includes requirements thatinformation systems be designs to include applicationcontrols that support complete, accurate, authorized andvalid transaction processingThe organization has an acquisition and planningprocess that aligns with its overall strategic directionTo maintain a reliable environment, IT-managementinvolves users in the design of applications, selection ofpackaged software and the testing thereofPost-implementation reviews are performs to verifythat controls are operating effectivelyThe organization acquires/develops application systemssoftware in accordance with its acquisition, developmentand planning processTabel 13:CobitPO8.3, AI2.3, AI2.4PO6.3, AI2, AI6.3AI1, AI2.3PO4.3, AI3.1AI1, AI2.1, AI2.2, AI7.2AI7.12AI2Acquire and maintain application software (AI2)Acquire and maintain technology infrastructure (AI3)Control objective: controls provide reasonable assurance that technology infrastructure is acquiredso that it provides the appropriate platform to support applicationsIllustrative controlsEr zijn procedures die waarborgen dat de infrastructuur, zoalsnetwerk en software, wordt aangeschaft volgens de richtlijnenvan de (bijv. financiële) applicaties die ze ondersteunenTabel 14:AI3Acquire and maintain technology infrastructure (AI3)Cobit45