Acceptance Criteria
A total of 29 acceptance criteria were documented, accompanied by 39 corresponding acceptance tests, each marked with its level of criticality. The client has reviewed the acceptance criteria document and has expressed that they are happy with the acceptance criteria and the associated tests.
The Test Result column is intended for the software development team to fill out based on whether of not the developed software passes or fails each of the acceptance tests. The Comments column is for additional comments that arose when conducting acceptance testing.
| Epic | User Story ID | Acceptance Criteria ID | Acceptance Criteria | TestID | Acceptance test | Critical (Yes/No) | Test Result (Accept / Reject ) | Comments |
| Evidence Management and Preparation | 1.1 | AC1.1.1 | Given that I’m logged in and I’ve navigated to a Category, When I selected files to upload and click the upload button, Then I expect the file to be uploaded and the completion status to be updated. | AT-EMP-01-01 | Log in as a Compliance Manager, navigate to "Data Governance," select a PDF file (e.g., "risk_assessment.pdf"), click "Upload," and verify the file appears in the category with the status updated to "In Progress." | Yes | ||
| AT-EMP-01-02 | Log in, go to "Ethics Policies," select two PDFs (e.g., "ethics_v1.pdf," "ethics_v2.pdf"), click "Upload," and confirm both files are listed with the status updated to "Completed." | Yes | ||||||
| 1.2 | AC1.2.1 | Given that I’m logged in and I’m on the page of category I selected with section to upload files for checklist item, When I select evidence of done incorrectly or in incorrect format to upload, Then I expect to see notification alerting me of incorrectly uploaded evidence. | AT-EMP-02-01 | Log in, navigate to "Data Governance" (PDF-only), select a JPEG file (e.g., "image.jpg"), click "Upload," and check for an error notification: “File uploaded must be of pdf type”. | Yes | |||
| AC1.2.2 | Given that I’m logged in and the popup modal for file upload is open, When I select evidence of done incorrectly or in incorrect format to upload, Then I expect to see notification alerting me of incorrectly uploaded evidence. | AT-EMP-03-01 | Log in as a Compliance Manager, then click “Upload Documents” on the home screen. A modal for upload document should popup, drop and drop/select file of unsupported types(e.g. a random exe files). Make sure the category selected is valid and then click upload. There should be an error notification: “File uploaded must be of pdf type”. | Yes | ||||
| 1.3 | AC1.3.1 | Given that I’m logged in, When I open the popup modal for file upload, Then I can expect upload multiples files at once and assign categories to them. | AT-EMP-04-01 | Log in as a Compliance Manager, then click “Upload Documents” on the home screen. A modal for upload document should popup, drop and drop/select multiple files for upload(they must be of valid type e.g. pdf). The modal should show the names of the files selected. | No | |||
| AT-EMP-04-02 | Once, there are files selected for the “Upload Documents” modal, the Compliance Manager should be able to select the categories for the files using the “Select a Category” dropdown. Then, they can click upload and once successful, the upload history for the category should include the file. | No | ||||||
| 1.4 | AC1.4.1 | Given that I’m logged in, When I select a category and navigate to the page for the category, Then I should be able to see submission history for each(selected/expanded) checklist item. | AT-EMP-05-01 | Log in as a Compliance Manager, select the “Category” tab if not yet on the tab. Click “View Details” button for a category(e.g. Oversight & Accountability). Once on the page for the category, look at the “Checklist Items” section. For each checklist item, it shows the upload history for the files uploaded with respect to the checklist item. | Yes | |||
| Guided Compliance Workflow | 2.1 | AC2.1.1 | Given that I’m logged in, When the category tab is selected on the home dashboard/page, Then I should be to see different compliance categories with brief description of what they are about. | AT-GCW-01-01 | Log in as a Compliance Manager, Select the “Category” tab if not yet on the tab. On the “Category”, there should be multiple category tiles. For each category tile, should be a brief description of the category under the name of the category. | Yes | ||
| 2.2 | AC2.2.1 | Given that I’m logged in, When the category tab is selected on the home dashboard/page, Then I should be able to see the completion progress of each category. | AT-GCW-02-01 | Log in as a Compliance Manager, Select the “Category” tab if not yet on the tab. For each category tile, there should be a progress bar showing the completion progress of the category. | Yes | |||
| AC2.2.2 | Given that I’m logged in, When I select a category, Then I should be able to easily find the completion progress of the selected category somewhere in the page. | AT-GCW-03-01 | Log in as a Compliance Manager, Select the “Category” tab if not yet on the tab. Click “View Details” button for a category(e.g. Oversight & Accountability). On the category page, they should be able to see the progress bar showing the completion progress of the category close to the top of the page. | Yes | ||||
| 2.3 | AC2.3.1 | Given that I’m logged in and I’m on the page of category I selected, When I want to learn about what each checklist item is about, Then I should be able to find the description for the checklist item on the page. | AT-GCW-04-01 | Log in as a Compliance Manager, select the “Category” tab if not yet on the tab. Click “View Details” button for a category(e.g. Oversight & Accountability). Once on the page for the category, look at the “Checklist Items” section. For each checklist item, the Compliance Manager should be able to see the description for what the checklist item is about. | No | |||
| 2.4 | AC2.4.1 | Given that I’m logged in and I’m on the page with documentation upload functionality, When I upload and submit the documents or evidences, Then the document should be record in the upload history for the uploaded files(s) and the file should be viewable for the compliance manager. | AT-GCW-05-01 | Log in as a AI Systems Developer, navigate to the “Document Upload” section on the dashboard/home page. Drop and Drop/Select documents. Click “Upload” button. Once the successful upload message received, check the upload history/recent documents. The uploaded document should be there. | Yes | |||
| 2.5 | AC2.5.1 | Given that I’m logged in and on the dashboard page, When I navigate to the section containing the system risk level, Then I should be able to see the checklist and/or have the checklist downloaded to my computer. | AT-GCW-06-01 | Log in as a AI Systems Developer, navigate to the “Compliance Requirements” section. Click on “Export Checklist Button”. The checklist for evidence requirements should be downloaded. | Yes | |||
| 2.6 | AC2.6.1 | Given that I’m logged in, When I’ve navigate to the page for the selected category. Then I should have ability to create new checklist item and edit existing checklist item. note: I’m not sure about this. | AT-GCW-07-01 | Log in as a Compliance Manager and navigate to a category by clicking “View Details” button. Click on the “Add Checklist” button. A modal form would pop up and the user can fill in the form to create checklist item. | Yes | |||
| AT-GCW-07-02 | Log in as a Compliance Manager and navigate to a category by clicking “View Details” button. Click on the button for editing checklist item. A modal form would pop up and the user can fill in the form to edit the checklist item in question. | Yes | ||||||
| AC2.6.2 | Given that I’m logged in, When I’ve navigate to the page/selected tab for managing category, Then I should have ability to create new categories and edit existing categories. note: I’m not sure about this. | AT-GCW-08-01 | Log in as a Compliance Manager and navigate to the page for managing categories. Click on “Add Category” button. A modal form would pop up and the Compliance Manager can fill in the form to add a category. | Yes | ||||
| AT-GCW-08-02 | Log in as a Compliance Manager and navigate to the page for managing categories. They should be able to see the list of categories. Click on button for editing for a category. A modal form would pop up and the Compliance Manager can fill in the form to edit the category. | Yes | ||||||
| 2.7 | AC2.7.1 | Given that I’m logged in, and on the page/tab for reviewing documents uploaded by AI systems developer, When the AI systems developer uploads some document, Then I should be able to view and download the document. | AT-GCW-09-01 | Log in as Compliance Manager, go to the “File” page/tab. The Compliance Manager should be able to see and view the newly uploaded file(s) from the developers/team members. | Yes | |||
| Collaboration and Task Management | 3.1 | AC3.1.1 | Given that I’m logged in, and I’m on the tab for task management, When I create/edit task, Then I should be able to assign/remove team members from tasks. | AT-CTM-01-01 | Log in as Compliance Manager, select the tab for task management(i.e.”Tasks tab”). Go to the task creation section(either on page or a modal open-able via a button), there should a section to assignment team members to task. | Yes | ||
| AT-CTM-01-02 | Log in as Compliance Manager, Click on “Assign Task” button, a modal should popup to allow the Compliance manager to select the task and assign team members to it. | Yes | ||||||
| AC3.1.2 | Given that I’m logged in, and I’m on the tab for task management, When I look over the task list, Then I should be able to see the tasks' completion progress | AT-CTM-02-01 | Log in as Compliance Manager, select the tab for task management(i.e.”Tasks tab”). There should table on the page containing a list of tasks with the assignee and completion progress for the task. | Yes | ||||
| 3.2 | AC3.2.1 | Given that I’m logged in, and I’m on the page for selected category, When I click on the element(e.g. icon or tab) for commenting on an evidence, Then there should be a text box for writing comment for the evidence and also the ability submit the comment. | AT-CTM-03-01 | Log in as Internal Auditor, navigate to a category by clicking on “View Details” button for a category. For one of the checklist item on page, click on the comment icon/button for the checklist item element. Put some text(e.g. “comment”) in the comment text box and click submit button. Then, they should be expected to see their new comment, with timestamp and username/display name. | Yes | |||
| 3.3 | AC3.3.1 | Given that I’m logged in, When I’ve been assigned tasks or get feedback, Then I expect to receive notification for this and view the notification. | AT-CTM-04-01 | Log in as AI Systems Developer, they should be able to see the notification/bell icon display numbers of notification they haven’t seen yet. Click on the bell/notification icon. | No | |||
| Audit Assessment and Navigation | 4.1 | AC4.1.1 | Given I’m Logged in When I’m on the dashboard page(which may be home page) Then I should able to see the compliance status indicator(e.g. percent overall compliance) | AT-AAN-01-01 | Log in as an Internal Auditor, view the dashboard, and confirm an overall compliance percentage (e.g., 75%) is displayed. | Yes | ||
| 4.2 | AC4.2.1 | Given I’m Logged in, When I’m on the home page and click on the “view evidence” button for the category. Then I can navigate to the page for the category | AT-AAN-02-01 | Log in as an Internal Auditor, click "View Evidence" for "Model Card" on the home page, and verify navigation to the "Model Card" page with uploaded evidence listed. | Yes | |||
| 4.3 | AC4.3.1 | Given I’m Logged in, and I’m already on the page for the category, When I click the review button for a checklist item, Then I should be able to view and open the uploaded evidence. | AT-AAN-03-01 | Log in as an Internal Auditor, go to "Data Governance," click "Review" for "Risk Assessment," and verify I can open and view the uploaded PDF file. | Yes | |||
| 4.4 | AC4.4.1 | Given I’m Logged in, When I navigated to auditor feedback section, Then I can see feedback for the evidence. note: I’m not sure this user story makes sense. | AT-AAN-04-01 | Log in as an AI Systems Developer, navigate to the feedback section for "Model Card," and verify I can see the auditor’s feedback comments (e.g., "Evidence incomplete"). | Yes | |||
| Reporting and Oversight | 5.1 | AC5.1.1 | Given that I am logged in and I’m on the dashboard page, When I click the “Export Report” button, Then I am able to download and view the simple report. | AT-ROS-01-01 | Log in as a Senior Board Member, click "Export Report" on the dashboard, and verify a PDF report summarizing compliance status is downloaded. | No | ||
| 5.2 | AC5.2.1 | Given that I am logged in, When I’m on the dashboard page, Then I should able see the audit completion percentage presented in a visually clear manner. | AT-ROS-02-01 | Log in as a Senior Board Member, view the dashboard, and confirm a 76% audit completion percentage is displayed as a progress bar or numeric value. | Yes | |||
| 5.3 | AC5.3.1 | Given that I am logged in, and on the page/tab with auditing records, When I click the filter button, set the filter and apply the filter, Then I should only see audits records satisfying the filter requirements(e.g. last 2 years) | AT-ROS-03-01 | log in as a Senior Board Member, go to the audit records tab, filter by "last 2 years," and verify only audits from 2023-2025 are displayed. | No | |||
| AT-ROS-03-02 | Log in as a Senior Board Member, navigate to audit records, filter by "AI Research" and "In Progress," and confirm only matching records appears. | No | ||||||
| AT-ROS-03-03 | Log in as a Senior Board Member, filter audit records by "Completed" status, and verify only completed audits are shown in the list. | No | ||||||
| 5.4 | AC5.4.1 | Given that I am logged in and I’m on the dashboard/home page, When I click “Generate Report” button, Then the report should be generated and downloaded. | AT-ROS-04 -01 | Log in as an Internal Auditor, click "Generate Report" on the dashboard, and verify a detailed PDF report with graphs and summaries is downloaded. | Yes | |||
| AT-ROS-04-02 | Log in as an Internal Auditor, generate a report for a specific project (e.g., "AI Research"), and confirm the report includes project-specific data | Yes | ||||||
| 5.5 | AC5.5.1 | Given that I am logged in and I’m on the dashboard/home page, When I navigate to the “Compliance Requirements” section, Then I should be able to see a summary of compliance requirements. | AT-ROS-05-01 | Log in as an AI Systems Developer, go to "Compliance Requirements" on the dashboard, and verify a list of requirements (e.g., "Upload risk assessment") is displayed without technical jargon. | Yes | |||
| Authentication and Authorization | 6.1 | AC6.1.1 | Given that I am on the login page, When I enter my login details correctly and click “Log In” button, Then I should be logged in and redirected to the home screen. | AT-AA-01-01 | As an Internal Compliance Manager, I enter my valid credentials (e.g., username: "manager", password: "pass") on the login page, click "Log In," and verify I am redirected to the home dashboard. | Yes | ||
| AT-AA-01-02 | As an Internal Auditor, I enter invalid credentials (e.g., wrong password) on the login page, click "Log In," and confirm an error message like "Invalid username or password" appears. | Yes | ||||||
| 6.2 | AC6.2.1 | Given that I am on the registration page, When I entered details for all required fields and click “Register” button, Then I should be able to log in using the information I inputted to register the account. | AT-AA-03-01 | As a new user, I enter all required details (e.g., username, password, email, role: "Internal Auditor") on the registration page, click "Register," then log in with those credentials and verify access to Internal Auditor features. | Yes | |||
| AT-AA-04-02 | As a new user, I attempt to register without filling in the password field, click "Register," and confirm an error message like "Password is required" is displayed. | Yes |
Change Log
Sprint 5
Added explanation for how to use “Test Result” and Comments column
Noted that the document has been reviewed by the client.