TAILIEUCHUNG - The CISA Prep Guide Mastering the Certified Information Systems Auditor Exam phần 4

Cho dù quy trình hướng dẫn sử dụng hoặc tự động được sử dụng, có cần lập hồ sơ thủ tục thay đổi khẩn cấp. Thay đổi khẩn cấp xảy ra ngay cả trong các sáng kiến phát triển quy hoạch tốt nhất. Nếu một quá trình kiểm soát thay đổi không cho phép ngay lập tức hành động khắc phục để xảy ra | 162 Chapter 3 Whether manual or automatic processes are used there should be documented procedures for emergency changes. Emergency changes occur even in the most well planned development initiatives. If a change control process does not enable immediate corrective action to occur and this process does not provide for authorization and approvals to catch up to the change later the business will not be successful in meeting its obligations. For this reason it is important to segregate the duties of the change control librarian from other tasks because this role then can be charged with insuring that the backward notification and post change approvals occur. It is preferred that these emergency changes be automatically trapped and identified. A possible control technique is to notify the owners automatically to ensure that all changes even those that happen in very busy and stressful situations will get recorded and reviewed. The discipline of recording and reviewing all of these changes must be evidenced by process procedures and logs that indicate this process is used continuously. Part of the change process should be the review of change preparedness prior to scheduling or proceeding with the change. The person accountable for operations will ideally assess all of the changes to be scheduled and the compatibility or interference of these changes with other scheduled tasks and changes. Changes that have not been adequately tested documented or reviewed with the user s representatives for possible impact to the business should be deferred until these processes have been completed. A checklist of acceptance criteria and a regularly schedule change control meeting is a good way to ensure that all of the items have been considered and everyone involved knows what the plans are. Possible checkpoints to consider include Testing and sponsor acceptance of change Back out procedures and programs that are available and tested Resource usage changes and plans to accommodate .

Đã phát hiện trình chặn quảng cáo AdBlock
Trang web này phụ thuộc vào doanh thu từ số lần hiển thị quảng cáo để tồn tại. Vui lòng tắt trình chặn quảng cáo của bạn hoặc tạm dừng tính năng chặn quảng cáo cho trang web này.