CM.A.1.1 - Stakeholder
C
CM.A.1.7
Post Deploy Review
CM.A.1.14 - Move to Production
Rollback
CM.A. Controls provide reasonable assurance that all systems and system changes are appropriately requested, approved, tested, and validated by authorized personnel prior to implementation to the production environment.
CM.B. Controls provide reasonable assurance that systems are developed and/or purchased in a manner that supports the accuracy and completeness of financial statements.
CM.A.1.2 Change Requests Documented
CM.A.1.5 - SW version Cntrl
CM.A.1.4 Change Control Forum
CM.A.1.8 Source Code access cntrl
CM.A.1.6 - Separate DEV, TEST and PROD Environs
CM.A.1.13 - Change Review Process
CM.A.1.9 - Production Systems Physical Access
CM.A.1.10 - Appropriate SOD
CM.A.1.3 Requests are reviewed
CM.A.1.11 - Emergency Change Proc differs
CM.A.1.12 - Standard Test Protocols
CM.B.1.1 SDLC Process
CM.B.2.1 - Testing done by appropriate staff
CM.B.2.2 Test results maintained
CM.B.1.2 Business Reqs are Documented
CM.B.1.3 Impact Assess. is done in IT
CM.B.1.4 Proper cntrls designed on new Sys.
CM.B.1.5 User/Support Docs; Code Escrow
CM.B.1.6 Standard test protocols are used
CM.B.1.7 Post-Deployment Review
CM.A.1.1
CM.A.1.2
CM.A.1.3
CM.A.1.4
CM.A.1.5
CM.A.1.6
CM.A.1.8
CM.A.1.9
CM.A.1.10
CM.A.1.11
CM.A.1.12
CM.A.1.13
CM.A.1.14
CM.B.1.1
CM.B.2.1
CM.B.2.2
CM.B.1.2
CM.B.1.3
CM.B.1.4
CM.B.1.5
CM.B.1.6
CM.B.1.7