Change Management: Validate
It is also recommended that Service Management review the change Management process periodically for efficiency and effectiveness. Such a review should be carried out shortly after the Change Management process is implemented, to ensure that the plans were carried out shortly after the Change Management process is implemented, to ensure that the plans were carried out correctly and that the process is functioning as intended.
Thereafter, regular formal reviews of the Change Management process should take place – at least every six months. To satisfy this control objective, administrators must review all changes to the production environment and compare the changes to documented approvals to ensure the approval process is followed. From the archived audit log data, obtain a sample of regular and emergency changes made to applications/systems to determine whether they were adequately tested and approved before being placed into a production environment. Trace the sample of changes back to the change request log and supporting documentation.