AI02 Acquire and maintain application software

focuses on

ensuring that there is a timely and cost-effective development process

is controlled by

AI02.01 High-level Design Translate business requirements into a high-level design specification for software acquisition, taking into account the organisation´s technological direction and information architecture. Have the design specifications approved by management to ensure that the high-level design responds to the requirements. Reassess when significant technical ...

AI02.02 Detailed Design Prepare detailed design and technical software application requirements. Define the criteria for acceptance of the requirements. Have the requirements approved to ensure that they correspond to the high-level design. Perform reassessment when significant technical or logical discrepancies occur during development or maintenance.

AI02.03 Application Control and Auditability Implement business controls, where appropriate, into automated application controls such that processing is accurate, complete, timely, authorised and auditable.

AI02.04 Application Security and Availability Address application security and availability requirements in response to identified risks and in line with the organisation´s data classification, information architecture, information security architecture and risk tolerance.

AI02.05 Configuration and Implementation of Acquired Application Software Configure and implement acquired application software to meet business objectives.

AI02.06 Major Upgrades to Existing Systems In the event of major changes to existing systems that result in significant change in current designs and/or functionality, follow a similar development process as that used for the development of new systems.

AI02.07 Development of Application Software Ensure that automated functionality is developed in accordance with design specifications, development and documentation standards, QA requirements, and approval standards. Ensure that all legal and contractual aspects are identified and addressed for application software developed by third parties.

AI02.08 Software Quality Assurance Develop, resource and execute a software QA plan to obtain the quality specified in the requirements definition and the organisation´s quality policies and procedures.

AI02.09 Applications Requirements Management Track the status of individual requirements (including all rejected requirements) during the design, development and implementation, and approve changes to requirements through an established change management process.

AI02.10 Application Software Maintenance Develop a strategy and plan for the maintenance of software applications.

is part of

Acquire and Implement (AI) To realise the IT strategy, IT solutions need to be identified, developed or acquired, as well as implemented and integrated into the business process.

In addition, changes in and maintenance of existing systems are covered by this domain to make sure the solutions ...

can be mapped to

[10.1] Release management process Objective: To deliver, distribute and track one or more changes in a release into the live environment.

supports

Acquire and maintain integrated and standardised application systems

Define how business functional and control requirements are translated in effective and efficient automated solutions.