Change Management Audit Program

Audit: Change Management Page PQ-1 DATE & W/P INITIAL REF CHANGE MANAGEMENT I. Description of Audit Area Change Management is the process by which changes are planned, scheduled, applied, tested, accepted, distributed, and tracked. The process can consist of the development/conversion of a new system or the modification of existing code. Changes may have many internal and external impacts. Change Management activities can impact a technology unit's ability to provide critical data processing and information delivery services to the corporation. It is necessary that each change be controlled throughout its life cycle and integrated into the production environment in a systematic and controlled manner. The primary objective is to maintain the integrity and reliability of the production environment, while making changes for the User community. Revised: 06/18/03 Audit: Change Management Page PQ-2 DATE & W/P INITIAL REF Objectives To address all activities that will result in changes to the production environment, irrespective of the technology platform or source of the change. Activities include application and system development and modification, telecommunications. Network system (including changes to option settings on file servers), line equipment (including but not limited to changes in options, additions/modifications of addresses) and vendor supplied ...