IT change management is a process to manage changes to production hardware, network devices, operating systems and application software. An organization’s management uses the IT change management process to: ensure IT changes meet the organization’s needs and create business value; anticipate and manage problems that may be introduced in the production environment as a result of changes; and promote the effectiveness and efficiency of IT change management efforts.
This audit work program may be useful to IT management and internal auditors to assess the controls that should mitigate the risk inherent in these events.