In order to review an acquisition that is using prototypes, the auditor should determine what regulations or guidance the agency has to define a prototyping methodology.
The auditor only reviews the acquisition itself, nothing else.