When the auditor general selects an information technology system development vendor contract or maintenance project described under section 261e for audit or investigation, the auditor general shall also validate the department's compliance with select processes and best practice standards and use the audit criteria in section 261e when appropriate and applicable.