Para 3.22.28 — MSO (Audit)
Original Rule Text
3.22.28 Where systems development is entrusted to contractors, the contract and its management become important audit concerns. It should be ensured that the vendor provides complete documentation along with the source code. Further, the terms and conditions, such as rights over the source code, provisions for modifications/updating in future, etc. should be examined. The penal provisions may also be examined in cases of non-delivery of the agreed upon services or non-adherence to the stipulated time schedules. It may also be ascertained whether any of the objectives envisaged could not be realised because of belated delivery of the software.
# Categories of Systems Development Audit
What This Means
When system development is outsourced to contractors, the contract itself and its management become key audit concerns. Audit must verify that the vendor provides complete documentation with source code, that contract terms cover rights over source code, provisions for future modifications, and penal clauses for non-delivery or delays. The auditor should also check whether delays caused any project objectives to be missed.
This explanation was generated with AI assistance for educational purposes. Always refer to the official gazette notification for authoritative text.
Key Points
- 1Outsourced development contracts are important audit concerns
- 2Vendor must provide complete documentation along with source code
- 3Contract terms on source code rights and future modification provisions must be examined
- 4Penal provisions for non-delivery or schedule non-adherence should be reviewed
- 5Check whether delays caused any envisaged objectives to remain unrealised
- 6Contract management by the auditee is also subject to audit scrutiny
Practical Example
A department outsourced its pension management system to a private vendor for Rs 3 crore. The auditor finds that the contract does not give the department ownership of the source code, meaning they cannot modify the system without the vendor's involvement (at additional cost). The project was delivered 18 months late, but no penalty was imposed despite clear penal provisions in the contract. Three key modules (pension calculator for pre-2006 retirees) were dropped due to the delay, affecting 8,000 pensioners.
This explanation was generated with AI assistance for educational purposes. Always refer to the official gazette notification for authoritative text.
Frequently Asked Questions
Why is source code ownership important?▼
What should penal provisions in IT contracts cover?▼
How does audit check contract management?▼
This explanation was generated with AI assistance for educational purposes. Always refer to the official gazette notification for authoritative text.