In order to review an acquisition that is using prototypes, the auditor should determine what regulations or guidance the agency has to define a prototyping methodology.
The auditor needs to check within one week if the prototyping methodology is correct before deciding on the acquisition.