Re: RE: Agile SOX

Hmm, not that easy to respond according that SOX is more less an acceptance

criteria.
Now, the purpose of agile is only having "pigs" meaning that our

stakeholders should also be "engaged".


Regarding to the basics of Audit, you will have 2 actors:
- external audit: in charge with measures, issues, variability, status and
risk level -- attending time to time
- internal audit: preventing the organisation from severity issues and
attending more often.


For both, it's quite easy to make them run as an agile team. But, is their
behaviour with the audited-people "agile"?


This is really a niche!


Now, you have ISAE 3402 (I guess) protocols supporting SOX. These protocols
are measuring if the work done is relevant to SOX. Then it makes perhaps
sense to see how agile is responding to those protocols.


Pierre
*NEIS*Senior Lean Agile Coach | Associate
M: +352 / 661 727 867
wecompany.me | You can book me <https://pierreneis.youcanbook.me/>






On 8 December 2015 at 18:05, 'Steve Ash' [email protected] [SCRUMDEVELOPMENT]
<[email protected]> wrote:


>
>
> Hi all
>
>
>
> Have read the other replies and concur but here is my ‘take’.
>
>
>
> Let me start by saying I have never been involved with SOX auditors (wrong
> side of ‘pond’).
>
> However, I have been involved with auditors in other fields both internal
> and external and this is the way I have addressed the ‘problem’ with
> success although sometimes more ‘painful’ than it really needed to be:
>
>
>
> Auditors are stakeholders!
>

> Ask them for their User Stories (May need some training here)
>
> Sometimes their User Stories become Non-Functional requirements (however
> you handle them in your organisation)
>
> Order, estimate and prioritise just as you would all the other
> requirements (US/PBI).
>
> Get Acceptance Criteria
>
> Talk to them about the details when needed.
>
> Get them to UAT their US
>
> Simples!!!
>
>
>
> Sometimes I have had pushback from them initially but when ‘The Agile Way’
> is explained, they come round to the idea and having tried it they realise
> that their ‘life’ has been made easier.
>
>
>
> You need to ‘dangle carrots’ to get people to change!!
>
>
>
> *Steve Ash*
>
> 
>