Before approving spending on a enterprise IT project, would corporate risk be better managed if the board was able to assess the probably of a large project overrun based on the project documentation provided by management?

What questions do your organization ask to determine if the scope has been properly determined?

 

The board evaluates the business case, lawyers evaluate contract quality, references and resumes determine competency… how do you objectively test if the scope of a project has been done correctly? Remember, the number 1 reason for ending up in court with your outsourcer is that the contract does not properly specify the business requirements. If a scope problem of 20% equates to more than $100,000, would it be prudent to manage this risk? How do you know you have all the requirements documented?

 

I'm interested in finding out more about protocol for completeness testing.