This guide published by The IIA helps internal auditors ask the right questions of the IT organization to assess its change management capability. It is designed to help you quickly assess the overall level of process risk and determine whether a more detailed process review may be necessary. The guide provides risk indicators of poor change management, and field-tested metrics to assess the health of the change management process. It includes top five steps to reduce IT change risks and an IT change management audit program.