Quality Assurance and Quality Management in IT
You will now explore quality assurance and quality management processes in IT in detail. According to the CISA Review Manual (CRM), an IS auditor must understand the concepts, processes, roles, and responsibilities of quality assurance and quality management within the company.
Quality Assurance
Quality Assurance (QA) is a process that aims to provide adequate confidence that an item or product conforms to the requirements developed. QA staff verify that changes to the system are approved, checked, and implemented in a controlled manner. Quality Control (QC) is a method for performing tests or reviews to verify that the product is free of defects and meets the user’s requirements.
Generally, QA personnel perform two distinct tasks:
- QA: This provides assurance that an object or product meets the requirements as laid down.
- QC: These are observation strategies or exercises that ensure that quality-related criteria...