An auditor should recognize that there are different system development models that may be used when a system development effort is acquired.
Auditors should force their client to adopt the recognized system development model.