Page 120 - CITP Review

Software and system evaluation, acquisition and implementation
The system solution management (SSM) function is similar in concept to the systems development life
cycle. The purpose of system solution management is to ensure quality in systems development and
deployment, that is, to make sure applications have the appropriate controls, and that errors and other
risks have been minimized.

System solution management also has a business purpose. Generally speaking, that purpose is to ensure
that the system aligns with the business model, strategic plans, and goals of the enterprise. Within
reasons of budget and other constraints, the SSM should lead to the selection of a solution that fits the
business processes as closely as possible, and is effective in aligning with the entity’s strategies.

Definition of the system acquisition and evaluation life cycle
There are three stages and nine individual functions in the system acquisition and evaluation life cycle
(SAELC). The phases are simply labeled numerically. Exhibit 3-10 depicts the elements of SAELC. All of
the following activities and processes should be fully documented.

Initial phase
The initial phase begins with a business case.

Usually a business unit manager discovers a need for a new application or a change in an existing
application, and follows some policy in requesting a change. Entities that have a mature IT governance
structure and process will require changes to be submitted for consideration to the IT governance
structure — for example, a change management committee, IT steering committee, BoD subcommittee,
or project management office — in the form of a business case.
In the business case, the proposal will be outlined as to need — supported by either high-level or detailed
business, functional, and technical requirements — and documentation provided to describe the
proposed solution. Based on P&P criteria, the business case usually provides for ROI or other factors
used in decision-making.

Exhibit 3-10 — System acquisition and evaluation life cycle

First phase Second phase Third phase
Business case System development Training

Information requirements Quality control Transition
Solution selection Solution implementation
System design

© 2019 Association of International Certified Professional Accountants. All rights reserved. 3-36