RE: Agile SOX

Hi all

 

Have read the other replies and concur but here is my 'take'.

 

Let me start by saying I have never been involved with SOX auditors (wrong
side of 'pond').

However, I have been involved with auditors in other fields both internal
and external and this is the way I have addressed the 'problem' with success
although sometimes more 'painful' than it really needed to be:

 

Auditors are stakeholders!

Ask them for their User Stories (May need some training here)

Sometimes their User Stories become Non-Functional requirements (however you
handle them in your organisation)

Order, estimate and prioritise just as you would all the other requirements
(US/PBI).

Get Acceptance Criteria

Talk to them about the details when needed.

Get them to UAT their US

Simples!!!

 

Sometimes I have had pushback from them initially but when 'The Agile Way'
is explained, they come round to the idea and having tried it they realise
that their 'life' has been made easier.

 

You need to 'dangle carrots' to get people to change!!

 

Steve Ash