Software Development Life Cycle (SDLC) is a logical process used by programmers to develop
software. Which of the following SDLC phases meets the audit objectives defined below:
System and data are validated.
System meets all user requirements.
System meets all control requirements.

A.
Programming and training

B.
Evaluation and acceptance

C.
Definition

D.
Initiation

Explanation:
It is the evaluation and acceptance phase of the SDLC, which meets the following audit objectives:
System and data are validated.
System meets all user requirements.
System meets all control requirements
Answer option D is incorrect. During the initiation phase, the need for a system is expressed and the
purpose of the system is documented.
Answer option C is incorrect. During the definition phase, users’ needs are defined and the needs are
translated into requirements statements that incorporate appropriate controls.
Answer option A is incorrect. During the programming and training phase, the software and other
components of the system are faithfully incorporated into the design specifications. Proper
documentation and training are provided in this phase.
CISM Review Manual 2010, Contents: “Information security process management”