Re: Change Management

We also use Track-It and have found it to be a very good tool, and we use Track-It reports to provide SOX documentation.

Regarding SOX requirements, we should all remember that SOX is intended to provide financial controls. Too often, SOX auditors recommend SOX procedures for non-financial applications. These may or may not be valuable controls, but they should not be enforced due to SOX. It seems that auditors do their best to justify their own existence, and this is one of the ways they do it.

If your SOX auditors are insisting on controls over all files, all programs, all MAPICS modules, you would be within your rights to remind them of the purpose of SOX.

Regards,
Bob Heavilin
Division Project / EDI Manager
Stant Manufacturing, Inc.

-----Original Message-----
From: mapics-l-bounces@xxxxxxxxxxxx [mailto:mapics-l-bounces@xxxxxxxxxxxx] On Behalf Of Jon Le Roi
Sent: Thursday, July 24, 2008 5:23 PM
To: MAPICS ERP System Discussion
Subject: Re: [MAPICS-L] Change Management

It has always been an interesting discussion with Auditors regarding
security for small departments with 1 or 2 developers that are also the
Security officers. Who watches the watchers? I have found that the key
element is to have lots of documentation and reports to show what has
changed and why.

Regarding Help Desk tools, we purchased Track-IT from Numara Software (
http://www.numarasoftware.com/Track-It.asp ). We have used it a couple
of years now and are quite happy with the functionality. Our users enter
their own tickets into the system and can check on the status of their
requests all via a web browser. A number of our Sox Controls are handled
via this tool as well as it is our repository of all change request
documentation. In addition, I use it to inventory I.T. assets; track key
software licensing; and to produce reports for monthly and quarterly
management reviews of I.T.

Regards,
Jon Le Roi
Director of I.T.
Tegal Corporation