Change and Configuration Controls The objective of change and configuration controls is to effectively initiate, monitor, test and approve production environment changes in a way that: Maintains integrity of applications and infrastructure that process transactions and summarize accounting information. Maintains segregation of incompatible duties when changes are made. Limits access to information assets to authorized individuals. BMC Software Solutions BMC Configuration Automation provides a comprehensive and flexible solution for controlling the infrastructure and application change process from request and planning through implementation and verification. Change Management COBIT suggests general IT controls that ensure any changes to financial applications and underlying IT infrastructure will not have an impact on the integrity of financial data. Changes must not impact the system’s ability to collect and record data and must ensure that the application and infrastructure are properly configured to ensure the integrity of the data and prevent unauthorized access. Using BMC Remedy Change Management Application companies can: Manage changes to infrastructure and applications via a controlled, traceable, standard process through a complete change management system Enable handling of regular and emergency changes Provide a complete audit trail of all changes Configuration Automation COBIT suggests general IT controls that ensure that applications and infrastructure are properly configured to preserve the integrity of the data and prevent unauthorized access. Using BMC Configuration Management companies can: Automate software change activities including the reliable, rapid delivery of software across heterogeneous, distributed client and server endpoints Automate the provisioning and updating of the entire software stack OS, patch, applications and content Implement a consistent repeatable server and client provisioning process that captures software state as well as builds best practices Enforce policy-based control and desired state, ensure that an applied change remains applied, and monitor drift from desired state