Hi, Under what conditions can your ITSM system be audited? Does anyone have any compliance documentation that provides steps on auditing guidelines we should comply with for ITSM?
For example: - segregation of duties (Change Management) - archiving / retention period for records - modifying records after submission I believe SOX audits your financial systems - so does this mean ITSM would not be audited if financial data is not stored in ITSM? Can ITSM be under some other type of audit? _______________________________________________________________________________ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug10 www.wwrug.com ARSlist: "Where the Answers Are"

