IT Examiner School eBook May 2025

Control Test Review a sample of documentation for significant technology projects, including the following:

 Initial budgets and projected timelines versus actual results  Project management and technology committee reports  Test documentation, including plans, scripts, results, and error rates  Post-conversion reports  Suspense accounts for outstanding items

Click here to enter comment

6. Evaluate change management procedures (e.g., software updates, vendor releases, and emergency program changes) for all critical systems and applications. Consider the following:  Request and approval  Testing  Implementation  Backup and backout  Documentation  User notification and training If all software updates and vendor releases have not been installed, review management’s documentation supporting the delay. Decision Factor 3 ▲ A change management process is in place to request and approve changes to systems configurations, hardware, software, applications, and security tools. Control Test Review a sample of change management documentation for software updates and/or emergency program changes. Click here to enter comment 7. Assess the ability of information technology solutions to meet the needs of the end users. Consider the following:  Satisfaction of end users  Quality of reporting tools used by management  Issues noted in meeting minutes Decision Factor 4 ▲ Click here to enter comment

If applicable, answer the following questions relating to source code and programming controls.

8. If critical vendor software is used in-house, determine whether the software contract or license agreement addresses the following:  Possession of current source code or provision that the code is held in escrow  The right to obtain, use, and modify the software in the event the software vendor is unable or unwilling to properly maintain the program(s) Decision Factor 5 ▲