IT Examiner School - Oct 2025

Internal Use Only

Examination Focus Areas (InTREx DA.1 & DA.2) Evidence / Artifacts Examined Focus Area • Approved project charter and business case • Board / senior management approvals • Steering committee minutes & key decisions Governance & Oversight

• Documented scope, schedule, budget • Risk assessments early & updated • Risk mitigation actions & escalation paths • Requirements & design documentation • Testing / QA plans & results • Formal change requests & approvals

Planning & Risk Management

SDLC Deliverables

• Due diligence records & vendor evaluations • Contracts / SLAs with security & performance terms • Ongoing vendor performance monitoring • Completion sign-offs & acceptance • Lessons learned reports & metrics • Transition to operations / support documentation

Acquisition & Vendor Management Post-Implementation Review

Internal Use Only

Questions?