Re: Agile SOX

Michael,

On 12/7/15 2:04 PM, Michael Wollin [email protected] 
[SCRUMDEVELOPMENT] wrote:
> In the conversations I’ve been having with my client’s internal SOX
> compliance people, we have reached agreement that SOX can be handled
> partly in the acceptance criteria of the stories and partly with the
> Definition of Done. But we have hit a snag.
>
> In their world, the User Acceptance Testing requirement can be met by
> the Product Owner, coming from the business, accepts the story as
> done. Alas, there may be a need to have a proxy product owner in some
> cases who is from the Information Management department and not the
> business. Not our first choice, but If this should be necessary, the
> SOX people don’t feel the Proxy PO can do UAT and be compliant.
>
> Looking for wisdom and for references to authoritative and/or
> insightful articles too.

I would rejoice that they're going to insist you have a real PO, and are 
going to make it happen.

Other than that, what do they suggest for getting PO approval of the 
acceptance tests developed with the PO Proxy?

There's no magic to SOX or any other compliance auditing. It's all about 
working with the auditors. Try to see the goals from their point of view 
and work to let them know that you have the same goals. Work 
side-by-side to develop a successful and acceptable solution.

  - George

-- 
  ----------------------------------------------------------------------
   * George Dinwiddie *                      http://blog.gdinwiddie.com
   Software Development                    http://www.idiacomputing.com
   Consultant and Coach                    http://www.agilemaryland.org
  ----------------------------------------------------------------------



------------------------------------
Posted by: George Dinwiddie <[email protected]>
------------------------------------

To Post a message, send it to:   [email protected]
To Unsubscribe, send a blank message to: [email protected]