Help
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Midude2000
Newcomer II
‎08-30-2022 06:34 PM
‎08-30-2022 06:34 PM

System generated listing of changes from Production Servers for SOX testing

Hello:
SOX asks companies to obtain a system generated listing of changes from the production environment and then map back to tickets...Simple concept but hard to do for all environments....

How are companies subject to SOX complying with this request? We provide last modified date but that is no longer enough for our audit firm so we are trying to think of ways to comply 

Reply
0 Kudos
1 Reply
dcontesti
Community Champion
‎08-30-2022 07:30 PM
‎08-30-2022 07:30 PM

We went through a number of years ago and had to change the way that we worked.

 

We had to "mandate" that all developers used our trouble ticket system to "input changes" that were being planned.  This allowed us to show audit that the change was planned, coupled with the change mgmt reports showed that the changes were also approved.

 

We did this for all systems not just those under SOX testing (control).

 

Of course this assumes that you have a Trouble ticket system.  At a minimum, you might be able to use the minutes from your change management meetings (again, hopefully you have these).

 

Anyone else?

 

d

 

Reply
0 Kudos