Audit Support

TurnOver Change Management has a proven record of helping companies satisfy regulatory requirements, including the Sarbanes-Oxley Act (SOX), FDA regulations, and HIPAA (Health Insurance Portability and Accountability Act). New customers quickly find that compliance is only one benefit of using TurnOver. Just as important, the IT best practices and operational efficiencies that you establish through TurnOver will make it easier for your company to successfully complete increasingly complex IT projects.

TurnOver reinforces your company's change management procedures across all computing platforms throughout the entire application development lifecycle. Its single audit database consolidates all information regarding software changes to any of your applications, regardless of platform, into one place — a tremendous benefit for businesses facing compliance audits.

TurnOver enforces the workflow and approval policies your company defines. It allows you to set authorities by both software application and development level — such as development, test, and production — to help ensure separation of duties, a recurring theme when it comes to compliance.

With TurnOver, auditors can easily follow a sample set of changes through the entire lifecycle (issue tracking, project management, development, testing, and distribution) to make sure they were implemented according to policy. In addition to other details, they can see:

who made the initial request, the reasons behind it, and when it was made
who approved the work
who made the actual changes
who approved the changes
who made those changes live

Issue Tracking

A problem management system that works closely with your change management system creates a seamless flow of information — from the affected department, to project managers, to development, to testers — so issues can be prioritized and resolved in a timely manner. TurnOver's issue tracking solution ExpressDesk offers a structured way for end users to enter requests directly into TurnOver via an intuitive browser-based interface. Once users enter a request, they can add details and review its status. As a result, ExpressDesk reduces the number of calls to the helpdesk and facilitates user department participation, while leaving a complete audit trail.

Project Management

Auditors look for a well-defined project management framework that allows a project manager to define the scope of the project, document responsibilities and authorities of team members, break the project into tasks, budget time, and resources, identify milestones and check points, and provide for approvals. Using TurnOver, you create the workflow your organization needs, and TurnOver enforces it to establish a repeatable process.

Development

Auditors want to see that you have a formal development process in place and that you can produce an audit trail of all program changes. TurnOver reinforces many development-level audit requirements: where development occurs, what environments you use for testing, where production source and object should reside, how you promote into a certain level, what distributions need to occur, who needs to give approval, and more.

TurnOver controls it all according to your specifications and retains an audit trail of each developer's work. Emergency change applications allow you to make changes to production without going through your usual process, and they become part of the complete audit record.

Testing

Auditors want to verify that you test changes in a separate test environment, that test environments represent the future production environment, that an independent test group is responsible for QA, and that you have documented test results and approvals. One of TurnOver's core strengths is providing effortless handoff between development and testing. If you already have test environments set up, you can easily configure TurnOver over them. If not, you can use TurnOver to create and populate these environments for you. Either way, TurnOver has you covered.

Distribution

Compliance auditors will want to see a structured way of distributing your changes to production servers. TurnOver ensures distribution of the correct software to the right place with integrity and adequate audit trails. It also archives the previous production environment for you, which means you can roll back a change quickly if necessary.

To learn more about how TurnOver addresses Sarbanes-Oxley requirements, download "The IT Manager's Working Guide to SOX Compliance."