The auditor should first review the methodology of the agency before the acquisition.
In order to review an acquisition that is using prototypes, the auditor should determine what regulations or guidance the agency has to define a prototyping methodology.