Change Management Audit 2026
Change Management
Report Issued
Assess whether changes to critical systems are authorized, tested and adequately segregated before going to production.
3
Controls in Scope3 / 3
Test Procedures Completed0
Open Findings1
Overdue Action PlansRisk & Control Matrix
| Objective | Risk | Control | Type | Frequency | Owner | Priority | In Scope |
|---|---|---|---|---|---|---|---|
| Authorized Changes | Unapproved change reaches production | System approval before deployment | Preventive | Per Change | Change Manager | 4.10 |
|
| Adequate Segregation | Developer approves their own change | Approval workflow enforcing segregation of duties | Preventive | Continuous | IT | 3.80 |
|
| Tested Changes | Change failure in production | Test evidence attached to the change record | Preventive | Per Change | Engineering Team | 3.60 |