 auditor may recommend a greater role for users if they are not involved in approving alternatives 
auditor may recommend a greater role for users if they are not involved in approving alternatives or validating system requirements.