Good morning… My internal audit team is saying that ALL changes, even changes related to maintenance must go through the change request approval process and should be in included in ISSO dashboards. Currently all changes are logged via SPLUNK. Is there new guidance that I don’t know about?

like
Posting as :
works at
You are currently posting as works at

It’s not new guidance and falls in the realm of best practice. I get the sense that there is some sort of regulatory requirement your IA team is basing this on. For instance in SOX you do want to document all changes including routine changes that affect any systems involved in financial reporting. However, policy is policy so there should be some alignment between that and procedure which is a compliance test that external auditors may perform. Ask your IA team what’s driving the request and have them explain the rationale with you. If the tracking of all changes will cause an impact to your team then let them know - there may be other controls in your matrix that can compensate.

like

What does the change management policy say about this?

The change management policy does not require it

Related Posts

What is the difference between. Senior 41 and senior 42

like

Anyone has insights into whether we can claim depreciation for our “home office” due to WFH? Not an expert here but looks like it’s for self employed individuals only, but maybe the individual tax experts in this community can help everyone out a bit 🤪

likehelpful

Hey All,
I am going to get married in September.
My office is in Yemlur and my fiance's office is at EPIP zone. Which is the best place to live and which platform to look after the house
Budget - 25k
Kindly help out

like

4 years of experience in software development as QA. Can someone suggest what can help boost my career in product management? I want to switch role. Would require some help here.
Current ctc 20lpa. I am also considering the ROI factor. Please help

like

Desi folks - question on travelling outside US while you're on L1B visa. I have my valid visa stamp till 2022. Do any of you know if we can travel to India in Dec and come back in Jan? Or is it affected by the Trump executive order that was passed in Jun that said non-immigrant workers can't enter the country till Dec 31? Just wondering if I leave for holidays, will I not be allowed back. Any sort of clarification you might have is helpful. FYI - I was in US before that June ruling came out. Thx

like

Hi all,

I got offer from below company please provide your suggestions which one is good. All are offering same Salary.

Java backend developer
1. Coforge (client -HSBC )
2. HCL (client - Conduent)
3. Ezetap by Razorpay
4. E-zest solution
5. Algoworks
6. Egencia by amex

like

So.. i tend to get too in the weeds and stumble around a lot on behavioural interview questions. I’m very bad at them. What are some good resources to prepare? When I google, I get crappy ehow article

like

Did anyone from INFOSYS after accepting got their CTC revised by showing them a higher offer? Infosys

like

Friends I joined here this month salary is credited today, but pf is not credited, Infact my details are not present in epfo portal.

This is my first salary in this company.

Please suggest any thing to worry here?

like

Do you guys think that our country is being heavily militarized?

like

Any California workers comp adjusters on here? How much are you getting paid and what company? How many years of experience do you have? Im trying to get a gauge for the market value. Thanks

like
like

For advice/fee based platforms: SEI Private Trust or Envestnet as your preferred?

like

Hi,
Is python+microservices+ gcp is good techstack to grow?

like

Hey every one. I’m looking for an entry level recruiter or customer success associate job. Can anyone assist?

like

Looking for job change ,having 5+ years of experience in Internal audit and risk, base location is gurgaon, willing to join immediately. Any recommendations??

like

Anyone worked for an in-house agency? Pros and cons? Did/do you enjoy it? Would you recommend it? More stable? More money?

Which one would you pick?

Big name shop. Shitty account, but you get opportunities beyond that.

Shop with bad reputation that lacks PR and hardly enters awards but has a lot of book-worthy projects.

like

Has anyone burned some bridges yet? Just curious 😏

like

Additional Posts in IT Audits/Assurance

Dear Amazing and incredible folk of fishbowl app, I received a HireVue interview for the 2022 New analyst position within Internal Audit at Goldman Sachs.

I will be greatly obliged if you could please share your experiences and what kind of questions I should expect. Further, do you get do overs if you start to mess up an answer? I had applied to technology audit so how much should I be prepared to talk about auditing as a service?

Once again any insights will go a long way. Thank you :)

like

I have a splunk question…. When would it be appropriate to use a dashboard instead of the actual logs to validate that all changes are being logged. My client uses dashboards to monitor higher risk changes in real time. It is not intended to “monitor or capture “ all changes. I think this is incompetence on the part of the assessment team

like

Does anyone know Deloitte UK IT Audit salaries for the following grades in London:

S1:
S2:
M1:
M2:
M4:

Also interested to hear Big4 UK comparisons at these grades.

like

Anyone joining west coast tech risk team at EY.? Any idea why the bgv is taking so long

like

Any idea how much tech auditors make in the Big Tech companies? (Apple, Microsoft, Alphabet, Meta, Amazon)

like

New to Fishbowl?

Download the Fishbowl app to
unlock all discussions on Fishbowl.
That was just a preview…
Sign Up to see all discussions
  • Discover what it’s like to work at companies from real professionals
  • Get candid advice from people in your field in a safe space
  • Chat and network with other professionals in your field
Sign up in seconds to unlock all discussions on Fishbowl.

Already a user?
Login here

Share

Embed this post

Copy and paste embed code on your site

Preview

Download the
Fishbowl app

See what’s happening in your industry
from the palm of your hand.

A phone with Fishbowl app

Scan your QR code to download
Fishbowl app on your mobile

Download app

Sign up for free to view this conversation on Fishbowl

By continuing you agree to Terms of Use and Privacy Policy

Already have an account? Log in

Sign up for free to continue using Fishbowl

By continuing you agree to Terms of Use(New) and Privacy Policy(New)
Messaging rates may apply

Already have an account? Log in

For account settings, visit Fishbowl on Desktop Browser or

General

Legal