Deze scriptie is geschreven door beide op persoonlijke titel

Manage changes (AI6, AI7)Control objective: control provide reasonable assurance that the significant system changes areauthorized and appropriately tested before being moved to productionIllustrative controlsRequests for program changes, system and maintenance (includingchanges tot system software) are standardized, logged,approved, documented and subject to formal change managementproceduresEmergency change requests are documented and subject toformal change management proceduresControls are in place to restrict migration of programs to productionby authorized individuals onlyIT management implements system software that does not jeopardizethe security of the data and programs being store donthe systemTabel 17:Manage changes (AI6, AI7)CobitAI6.1, AI6.2, AI6.4, AI6.5,AI7.3, AI7.8, AI7.9,AI7.10, AI7.11AI6.3, AI7.10AI7.8AI6.2, AI7.4, AI7.9Define and manage service levels (DS1)Control objective: control provide reasonable assurance that service levels are defined andmanaged in a manner that satisfies the business requirements and provides a common understandingof performance levels by which the quality of services will be measuresIllustrative controlsCobitService levels are defined and managed to support the business DS1.2, DS1.3, DS1.5,requirementsA framework is defined to establish appropriate performanceindicators to manage service-level agreements, both internallyand externallyTabel 18:Define and manage service levels (DS1)DS1.6DS1.1, DS1.347