Page 291 - ITGC_Audit Guides
P. 291

8. Implement change.                                                    
                       Communicate the change to stakeholders who may be affected.

                       Approve the change for implementation.
                       Implement the change as requested (for software, this may require a release ticket).

                    9. Verify/validate change.                                              
                       Was the change successful?
                       Was the change process followed?

                       What was the variance between the planned and implemented change?
                       Were internal control, operations, and regulatory compliance requirements maintained?
                       What lessons were learned that may be used to improve the process?
                    9A. Back out of the change (if unsuccessful).
                       Execute back-out procedures.


                    10. Close request.                                                      
                       Conduct lessons learned.
                       Publish the change schedule.
                       Make agreed-to changes to the change management process.












































                   28 — theiia.org
   286   287   288   289   290   291   292   293   294   295   296