IS Quality-Management Strategies and Policies

Per ISACA, quality assurance usually performs two distinct tasks:

• Quality assurance (QA)— Helps the IT department ensure that the personnel are following prescribed quality processes. For example, QA helps ensure that programs and documentation adhere to the standards and naming conventions.

• Quality control (QC)— Is responsible for conducting tests or reviews to verify that software is free from defects and meets user expectations. This can be done at various stages of the development of application systems, but it must be done before the programs are moved into production.