Skip to Main Content

2017 Chicago ISACA Fall Seminar - Auditing Agile & Scrum Development Projects

Presented by: MIS Training Institute, Speaker: Tom Salzman




ISACA Chicago Chapter - Fall Seminar: Auditing Agile & Scrum Development Projects
Presented by: MIS Training Institute, Speaker - Tom Salzman
2 day Seminar - 16 CPEs
Dates: November 2nd & 3rd, 2017

Location: Conference Center at One North Wacker
1 North Wacker Drive 2nd Floor - Michigan II Conference Room
Chicago, IL, 60606

ISACA Member fee: $450.00
Non-Member fee $550. 00
ISACA Member In-transition/student fee $150.00
Handout binder, continental breakfast, break refreshments, and lunch included.

Contact (Norm Spielman; or 312-455-0557) for questions.

Seminar Overview:
Today, application systems development is all about SPEED. Agile and Scrum are all about getting data as well as processing and reporting to the customer ASAP. This is further complicated by the lack of standardized methodologies, expectations and business models. Auditors, reviewers and project sponsors are further confounded by the difficulty of knowing what can be done in a definitively short amount of time, especially in an environment that discourages oversight and audit.

This course is designed to remove the complication, identify what auditors and developers can do to facilitate and achieve success and provide risk-based awareness of what can go right and what can go wrong with Agile and Scrum development. Key risk-based “triggers” will be provided that heighten awareness of how to review, manage, and audit these “moving targets”. This course provides this unique tool that will set you on a path of contributing without distracting.

Prerequisite: None
Advanced Preparation: None
Learning Level: Basic
Field: Auditing
Delivery Method: Group-Live
Audience: Financial Auditors, IT Auditors, Application Systems Development Team Leaders, Scrum Masters, Project Sponsors

What You Will Learn:

1. What Exactly ARE Agile and Scrum?
• traditional application systems development
• agile
• scrum
• prototyping
• conditions when agile and scrum work, and then they don’t work
• project manager vs scrum master

2. How to Learn About the Project in Time to Get Involved
• key team members
• passive ways of being aware of agile and scrum projects
• up-front risk assessment

3. What Is the definition of Success vs Failure
• who defines success?
• is the project doomed from the beginning?
• key triggers to look for

4. The Infrastructure that Should Be in Place BEFORE the Project Begins
• security and IAM
• governance
• networks
• encryption

5. What to Look for BEFORE the Project Begins
• key documents to request – a checklist!
• budget problems
• goals that are achievable
• planning and project management
• team member skills…are they really subject matter experts?
• project sponsor responsibilities
• team member commitments and responsibilities
• the WAR ROOM

6. The Project Manager
• qualifications
• expectations
• key deliverables
• scheduling
• educating the project manager about internal controls in 10 minutes
• project management tools to facilitate management
• how does senior management evidence their support
• over-commitment
• key triggers to look for

7. The Steering Committee
• what they should expect
• metrics to apply
• key deliverables
• key triggers to look for

8. The Project PLAN
• content to expect
• checklist of best practices
• milestones
• key triggers to look for

9. What to Look for DURING the Project and the Key Triggers to Apply
• time and budget overruns
• prioritizing
• problem management
• scripts!
• unskilled programmers
• subject matter experts (alleged)
• computer security
• testing
• training
• inadequate end-user training
• data conversion weaknesses
• unknown programming languages
• inadequate development team staffing

10. Testing. Yes, TESTING!
• audit testing without disrupting
• benchmarks
• how testing can find problems before they occur

11. DON’T Trust the Interfaces
• what can go wrong, and how to correct that
• best practices
• testing and managing the interfaces
• key triggers to look for

12. Change Management
• what does go wrong
• key triggers to look for

13. Reporting Deficiencies
• samples


  • When

  • Thursday, November 2, 2017 - Friday, November 3, 2017
    8:30 AM - 4:30 PM
    Central Time

  • Where

  • Conference Center at One North Wacker
    1 North Wacker Drive
    2nd floor - Michigan II Conference Room
    Chicago, Illinois 60606

Outlook Outlook
iCal iCal
Google Google
Yahoo! Yahoo!