During the evaluation of controls over a major application development project, the MOST effective use of an IS auditor's time would be to review and evaluate: