Question

An organization has chosen a prototyping approach to develop a new customer-facing web application because business requirements are not yet fully defined. During the audit, the IS auditor is asked to identify the GREATEST risk associated with using this development methodology in this situation.

Accepted Answer

The iterative refinement of prototypes may lead to inadequately defined controls and poorly documented requirements

Answer

The final system will require more processing capacity than originally estimated

Answer

Users will be unable to visualize the system before it is fully built

Answer

The project will take significantly longer than a predictive waterfall approach