https://tharong.com/what-is-the-purpose-of-the-auditors-review-of-sdlc-documentation