IT General Controls : Change Management List 1406
-
Under Change Management List for General Controls related to Infrastructure I am listing following areas :
a) Database
b) Operating System
c) Network
d) Telecom
e) Facilities Management
f) Physical Security
g) Incidence Response Handling/Escalation Procedures
h)Data Center Operations (Job scheduler , Backup/Restore)
Any Changes in Production environment for above should be provided on the Change Management Lists.
e.g. OS Upgrade/Patch (IBM PTFs); ACL Change on Router, Firewall Policy Change , Upgrades to Utilities/Testing Tools such as Test Director or Change Management Software(ALDON) , Job Scheduler Changes etc.
Am I missing any areas?
-
Hi - The list shared is most likely complete for the Infrastructure support team within your organization. You might obtain an up-to-date organization chart to see if there are missing items. Below are a few ideas that may or may not apply:
- Application System support - For example, many of the areas you listed play a role in the Change management when new systems or changes to applications occur. As you might have an indirect role here, another area may also be documenting this
- Information Security (aka Data Security) - Change management is required for patch management, AV product updates, etc.
- Customer Support Center (aka Help Desk) - in case that’s needed
- Budget/Purchasing/Licensing