The phases and deliverables of a system development life cycle (SDLC) project should be
determined:

A.
during the initial planning stages of the project.

B.
after early planning has been completed, but before work has begun.

C.
throughout the work stages, based on risks and exposures.

D.
only after all risks and exposures have been identified and the IS auditor has recommended
appropriate controls.

Explanation:

It is extremely important that the project be planned properly and that the specific phases and
deliverables be identified during the early stages of the project.