During the Independent Verification phase, an outside, independent group (Testing and Certification Office (TCO), also known as Acceptance Testing) will verify the delivered product meets the previously agreed upon requirements. This will include user acceptance testing of the deployment unit, the deployment plan and any training and/or system support materials. This phase is a joint effort between the Development team and TCO.

During this phase, the development team will:

Interaction with the DBMO will likely occur during every phase of the SDLC. During this phase the TCO and the DBMO both work closely in supporting the development team with testing. The DBMO supports the movement of databases from development to acceptance testing so TCO can perform independent testing.

C&A documentation to consider during this phase: Disaster Recovery Plan, Security Test & Evaluation, Security Assessment Report.

Contact the Information Security Office for further details regarding specific efforts relevant to this phase of the SDLC.