Download Free SAS 70 IT Control Objectives Toolkit. This Statement Auditing Standards (SAS) no 70 contain samples of Program Change Control, Access Control and Computer Operation Control Objectives as described below:
Program Change Control
- Ensure that production environment changes are approved by management prior to implementation in accordance with documented policies and procedures.
- Ensure that necessary modifications to the existing production environment are implemented within the timeframes required by documented policies and procedures.
- Ensure that modifications to the production environment are tested prior to implementation and function consistent with documented policies and procedures.