In order to review an acquisition that is using prototypes , the auditor should determine what regulations or guidance the agency has to define a prototyping methodology .
The auditor only reviews the acquisition itself , nothing else .