No abstract

No abstract

The dependence of businesses on properly functioning information systems to allow organizational personnel and outside investors to make important decisions has never been more pronounced. Information systems are constantly evolving due to operational and security requirements. These changes to information systems involve a risk that they could occur in a way that results in improper processing of information and/or security issues. The purpose of this chapter is to consider related guidance provided in a Global Technology Audit Guide (GTAG) from The Institute of Internal Auditors in conjunction with current change and patch management literature in order to assist internal auditors and organizational personnel in better understanding a process that leads to efficient and effective information system changes. The authors describe how internal auditors and information technology professionals can work together with organization management to form a mature approach in addressing both major information system changes and patches.

Failure to keep pace with rapid developments in information technology can subject an organization to inefficiencies in obtaining reliable information that is imperative in making important decisions. The concept of change management attempts to move organizations in an efficient manner toward a desirable future state. In the realm of information processing, there is a continuing development of thought as to an appropriate framework to cover a vast array of issues from patching a specific software application to changing an overall system to better meet the strategic issues of an organization's environment. This article considers related guidance provided in a Global Technology Audit Guide (GTAG) from The Institute of Internal Auditors, COBIT from the ISACA, and current change and patch management literature in order to demonstrate that there is a common stream of thought in the evolution of a framework for applying change management to information systems.

No abstract