Retain audit trail if change system that records audit? 1545

  • What are the rules if you would change vendors for your ticketing or possibly bug tracking system in mid-year, which is used for GCC’s evidence. Assuming you only carry forward current open issues to the new system, could you prevent the auditors from looking at the old bug system? Could you label it has a remediation and say the new system took effect on a certain date, thus pull samples from only the new system, or would the auditors demand to be able to see the entire years history even if it was across two systems.

Log in to reply