V.
Change Management Work Program
Topic
Objective
Audit Procedures and Comments
Results
Workpaper
Reference
I. Change Management
Documentation
To ensure a formally
documented change
management process exists
and is maintained to reflect
the current process.
1. Determine if a change management
process(es) exists and is formally documented.
2. Obtain a copy of the change management
procedures and verify that they (at a minimum)
include:
* Accountability for managing and coordinating
changes;
* The change management flow(s) within the
organization;
* The change management responsibilities of
each organizational function;
* The deliverables from each organizational
component;
* Specific timetables for reviewing and
scheduling planned changes;
* Specific timetables for the retention of
historical records;
* The handling of all changes, including change
back-outs;
* The circumstances when normal change
management controls can be waived, and the
methodology to be followed in those situations
(e.g., emergency).
3. Determine the process used to identify and
update user/system documentation as a result
of the change(s) made.
4. Determine if a process exists to maintain the
change management procedures. Identify
Oracle products and versions in use.
V.
Change Management Work Program
Topic
Objective
Audit Procedures and Comments
Results
Workpaper
Reference
II. Change Initiation and
Approval
To ensure change requests
are properly initiated and
approved.
1. Verify a methodology is used for initiation
and approval of changes.
2. Ensure the request form includes (at a
minimum) the following information:
* name of requester
* phone number and department
* requester's signature
* reason for change
* List of modules that need to be changed
* Supervisor's name
* Supervisor's approval (changes must be
approved by someone other than the requester).
3. Determine if priorities are assigned to the
change requests.
4. Ensu