ABSTRACT

Th is chapter focuses on using audit tools and techniques during system maintenance and operating system reviews. Because systems maintenance is one of the least rewarding functions in the information technology (IT) department, it is also one of the most neglected, and often, the area where control weaknesses can be found. Th rough a comprehensive review of this area, the IT auditor must evaluate the organization’s change management process to determine whether software fi xes and changes compromise the system’s integrity.