premise: The auditor should be able to understand the system requirements, development methodologies, and test tools being used.
hypothesis: The auditor has plenty of tools to learn about, and is given a certificate at the end of the course.