Since management is assuming that the implementation went well, the primary focus of the IS auditor is to test the controls built into the application to assure that they are functioning as designed. Achieving the system objectives is important; however, there may not be enough data after two months to assess whether the objectives were achieved. It is also important to assess the effectiveness of the project, however, assuring that the production environment is adequately controlled after the implementation is of primary concern. Reviewing change requests may be a good idea, but this is more important if the application is perceived to have a problem.