Segregation Duties:Who can implement a change to Production? 189

  • Or 'Which came first? The chicken or the egg?
    A SOx issue from our external audit identified that our Operations Team ‘Implementors’ have access to the production system.
    Our developers do not have access to production. Our Operations Team Implementors (2 system administrators) load changes to production on a scheduled implementation date set by our Change Control Board.
    If your company is SOx compliant, who and how do you ‘push the button’ to implement a change to your production system?
    If no one has access to production how do we implement changes?

Log in to reply