Introduction
  簡介
  The very term auditor and audit makes many of us feel uncomfortable. Many industries have independent inspectors and auditors. As function points become more widely used and become a more important part of decision making, those using the function point counts will want them independently reviewed and audited. Auditing is the process by which a competent, independent person accumulates and evaluates evidence about quantifiable information related to a specific entity for the purpose of determining and reporting on the degree of correspondence between the quantifiable information and established criteria.
  一說起審計師和審計，我們中的許多人都會感到不安。如今，許多行業(yè)都有獨立的監(jiān)察員和審計師。隨著功能點算法應用日漸廣泛，并成為決策支持的重要組成部分時，那些使用功能點估算的結(jié)果需要被獨立復審和審計。審計是一個由權(quán)威、獨立的專業(yè)人士，收集和評估特定實體的大量信息證據(jù)，并根據(jù)這些大量信息和已建立的標準之間的吻合程度進行決策和匯報的過程。
  Like other industries that have prescribed guidelines (such as accounting), independent auditors can provide valuable feedback on the actual function point count and the overall function point counting process. An function point auditor should be independent, but an auditor can be still be inside your company, perhaps part of your metrics team, or they can be an independent third party.
  和其他有既定指導方針的行業(yè)（如會計業(yè)）一樣，獨立的審計師可以對實際功能點估算和整個功能點估算過程提供很有價值的反饋。原則上審計師應該是獨立的，但仍可來自企業(yè)內(nèi)部，可以是你的度量團隊中的一部分，也可以來自是獨立的第三方團隊。
  To do an audit of any kind, there must be information in a verifiable form and some standard (hopefully IFPUG 4.0) by which the auditor can evaluate the information. The auditor may go to the business premises to examine records and obtain information about the reliability of the function point counts. On the other hand, there may be adequate information that can be sent to the function point auditor that can be reviewed off site.
  任何一項審計都必須有可證實的信息和一些標準（最好是IFPUG 4.0）做為評估的依據(jù)。審計師可能會做一些商業(yè)假設(shè)來審核記錄，并獲取功能點估算的可靠性信息，另一方面，審計師也需要足夠多的信息，以便離開評估點現(xiàn)場后仍可以復審。
  Accumulating and Evaluating Evidence
  收集和評估證據(jù)
  Reviewing a function point count to insure IFPUG 4.0 counting guidelines were followed would be considered a compliance audit. The purpose of a compliance audit is to determine whether the function point counts follow specific procedures and guidelines set down by the IFPUG Counting Practices Committee. The results of a compliance audit are generally reported to someone within the organizational unit being audited rather than to a broad spectrum of users.
  審核功能點估算過程以確保其遵守了IFPUG 4.0 估算指導方針被稱之為兼容性審計。兼容審計的目的是審核功能點估算是否遵守IFPUG估算實踐委員會制定的每個程序和操作規(guī)程。其結(jié)果通常被匯報給被審計的組織單位里的某個人，而不是大多數(shù)用戶。
  Evidence is defined as any information used by the auditor to determine whether the function point count being audited is in compliance with IFPUG guidelines. Evidence can take many different forms, the function point count, system documentation, conversations with developers and users, and interviews with individuals that conducted the original count. The auditor gathers evidence to draw conclusions.
  證據(jù)即審計師用于決定被審計的功能點估算是否遵守IFPUG指南的所有信息。證據(jù)有很多種表現(xiàn)形式，如功能點數(shù)據(jù)，系統(tǒng)文檔，和開發(fā)人員、用戶的交談信息，和執(zhí)行最初估算的人的面談信息等。審計師收集證據(jù)并由此分析出結(jié)論。
  Of course the function point count itself can be used as evidence, but using the function point count alone would be severely inadequate. It is impossible to determine the accuracy of a function point count without evaluating additional evidence.
  當然，功能點數(shù)據(jù)本身也可以做為證據(jù)，但只使用功能點數(shù)據(jù)是遠遠不夠的。想單純使用功能點數(shù)據(jù)而不評估其他證據(jù)就得到正確的功能點估算是不確實際的。
  If an auditor was given the task of auditing a company with 500,000 function points it would be impossible to review every count. The auditor may select only 20 or 30 applications to actually audit. The actual sample size will very from auditor to auditor and audit to audit. The decision of how many items to test must be made by the auditor for each audit procedure. There are several factors that determine the appropriate sample size in audits. The two most important ones are the auditors' expectations of the number of errors and the effectiveness of the clients internal function point counting procedures. The suggested procedures at the end of this document can help in determining both of these criteria.
  比如,如果一個審計師接到一個有500000個功能點的公司的審計任務(wù)，那他就不可能逐一審計每個功能點。這時候，審計師會只選擇20到30個應用去做實際審計。實際審計樣本的大小因人而異，且每次審計都會有所不同。其數(shù)量必須由每個審計師針對每次審計決定。樣本大小選取的合理性取決定于幾個因素，其中最重要的兩個因素是審計師對錯誤數(shù)量的預期和客戶內(nèi)部功能點估算程序的有效性。本文最后建議的20步曲可以有效幫助你決定這兩個因素。
  Additionally, the evidence must be pertain or be relevant to the audit. The auditor must be skilled at finding areas to test or review further. For example, the auditor may determine during conversations that their was some confusion about external inputs and external interface files. In this case, the auditor would review the actual system documentation and the function point count to insure that the all the external input and external interface file were treated correctly. Another example, would be that the function point counter had never counted a GUI application. The auditor would review a series of screens and determine if the original counter had correctly counted such items as radio buttons, check boxes, and so on.
  另外，證據(jù)必須依附于審計或和審計相關(guān)。審計師必須擅長發(fā)現(xiàn)那些要進行驗證或進一步復審的區(qū)域。比如，審計師在交談中發(fā)現(xiàn)外部輸入和外部接口文件有混淆，在這種情況下，審計師應復審實際系統(tǒng)文檔和功能點估算，以確認所有的外部輸入和外部邊界文件都正確處理。另一個例子，可能功能點估算人員從沒做過GUI應用估算，這時，審計師應復查一系列的頁面屏幕，以保證如radio boxes,check boxes等這些項都估算正確。
  The evidence must be considered believable or worthy of trust. If evidence is considered highly trusty worthy, it is a great help in assisting the auditor with a function point audit. On the other hand, if the evidence is in question such as incomplete documentation (or old documentation) then the auditor would have to scrutinize these areas of the count more closely. Additionally, the auditor should make note in the final report of any evidence they requested and the client was not able to provide.
  證據(jù)必須是可信的或令人信服的。如果證據(jù)被認為高度可信，將大大有利于審計師的功能點。另一方面，如果證據(jù)是可疑的，比如不充分的文檔記載或舊的文檔，則審計師將不得不深入仔細地審核這些地方。另外，審計師應在最終報告中說明有哪些證據(jù)是他們要求，而客戶不能提供的。
  All evidence should be evaluated based upon valuation, completeness, classification, rating, mechanical accuracy, and analytical analysis.
  所有證據(jù)都應該在評價（valuation）、完整性（completeness）、分類（classification）、分級（rating）、機械準確性（mechanical accuracy）和類比分析（analytical analysis）的基礎(chǔ)上被評估。
  Valuation: The objective deals with whether items included in the function point count should of been included. Perhaps the original function point count included additional transactions or files that should not of been included.
  評價（Valuation）：目的是確定功能點估算中包含的檢查項是否該包含。有可能最初的功能點估算包含了多余的事務(wù)或不應包含的文件。
  Completeness: The objective deals with including all transactions and files in the final function point count. It is important that the application team review the final function point count to insure all transactions and files have been included. The valuation and completeness objectives emphasize opposite audit concerns. Valuation deals with potential overstatement and completeness with unrecorded transactions and files.
  完整性（Completeness）：目的是將所有事務(wù)和文件包含進最終的功能點估算。應用小組復審最終的功能點估算以確保包含了所有的事務(wù)和文件,這點非常重要。評價和完整性分別強調(diào)審計的兩個相反的關(guān)注點。評價處理那些可能出現(xiàn)的多余事務(wù)或文件，而完整性則處理不被包含的事務(wù)和文件。
  Classification: Classification involves determining whether all transactions and files have been correctly classified. It is important to make sure the external input and external interface file have been classified correctly for example.
  分類（classification）：分類決定所有的事務(wù)和文件是否被正確分類。比如說確保所有的外部輸入和外部接口文件都已經(jīng)被正確分類就非常重要。
  Rating: This objective deals with determining if the transactions and files were appropriately ranked as low, average or high. To complete this objective a detail examination of the data elements and files referenced.
  分級（rating）：分級決定所有的事務(wù)和文件是否被正確的劃分為低、中、高三個等級。為達到這一目標，詳盡的數(shù)據(jù)元素和文件的檢查是值得借鑒的手段。
  Mechanical Accuracy: Testing the mechanical accuracy involves rechecking a sample of the computations and transfers of information from one document to the next. Rechecking of computations consists of testing the original function point counters arithmetical accuracy. This is most important if an automated tool was not used while counting function points.
  機械準確率（echanical Accuracy）：檢測機械準確率包括審核樣本的計算結(jié)果是否正確及信息各文檔中的傳遞是否正確。復查計算結(jié)果包含最初功能點數(shù)學計算正確性的驗證，如果在計算功能點的時候沒使用自動計算工具，這個驗證就必不可少。
  Analytical Analysis: This procedure is another way that a function point count can be validated. For example, the ratio of external inputs, external output, external inquiry, internal logical file, and external interface file can be compared with other applications meeting similar business needs. Also, the general system characteristics can be reviewed and compared to similar applications. Analytical procedures should be performed early in the audit so to help the auditor determine areas that need to be more thoroughly investigated.
  類比性分析（analytical Analysis）：這個步驟是另一種驗證功能點估算的方法。舉個例子，外部輸入、外部輸出、外部查詢、部邏輯文件，和外部借口文件的比率是可以和其他相近商業(yè)目的的應用進行類比。同樣，通用的系統(tǒng)功能的復審也可以和相似的應用進行比較。該步驟應在審計的早期進行，以便審計師可以決定哪些關(guān)鍵區(qū)域需要更透徹的審查。
  Before an audit or validation of a function point count can take place a procedure should be in place to evaluate a the count(s). A procedure, at a minimum, should cover all the areas mentioned above. The procedure does not have to be a rigid document that is followed, but a guideline to conduct the audit. At the end of this article is a 20 step procedure that should assist anyone with developing their own guidelines or with auditing a function point count.
  在審計或功能點估算驗證進行之前，都應該有一套程序支持。這套程序最低限度應該涵蓋以上提到的四個領(lǐng)域。它不必是一個人人必須遵守的嚴格文檔，但它是審計師執(zhí)行審計的指導方針。在本文最后提供的“功能點估算審計20步曲”可以幫助審計師編寫自己的指導方針，也可以協(xié)助他們執(zhí)行功能點估算審計。
  （待續(xù)）