Software Engineering

11.2.5 
Identify data processing procedures
Each function must be specified by identifying the data transformation procedures 
necessary to transform inputs into the desired outputs, response messages, or state 
information. Response information pertains to situational awareness concerning 
issues encountered during data processing, such as data record not found or input data 
out of range. State information pertains to internal variables that represent the status 
of a transaction or computing environment asset. The data processing procedures 
should address the algorithms or computational logic by which the desired outputs 
are generated.
It is not sufficient to verbally describe the data processing procedures to be per-
formed. The procedures should establish the transformational sequence of steps 
that must be accomplished to execute the function. For example, the ATM personal 
identification number (PIN) verification function may involve the following trans-
formational steps: