Page 291 - ITGC_Audit Guides
P. 291
8. Implement change.
Communicate the change to stakeholders who may be affected.
Approve the change for implementation.
Implement the change as requested (for software, this may require a release ticket).
9. Verify/validate change.
Was the change successful?
Was the change process followed?
What was the variance between the planned and implemented change?
Were internal control, operations, and regulatory compliance requirements maintained?
What lessons were learned that may be used to improve the process?
9A. Back out of the change (if unsuccessful).
Execute back-out procedures.
10. Close request.
Conduct lessons learned.
Publish the change schedule.
Make agreed-to changes to the change management process.
28 — theiia.org