IT Change Management – Risks, Controls, and Walkthrough Questions
March 19, 2026
Copyright Notice All content is protected by international copyright laws. You may reference or quote small portions of this document with proper attribution to The IIA, but unauthorized reproduction, distribution, or use beyond that, other than for your own personal use, is strictly prohibited and may constitute a violation of copyright law, resulting in civil and criminal penalties. Contact copyright@theiia.org for permission to use our materials.
Internal auditors can use the sample questions during a walkthrough or similar meeting to gain an understanding of the organization’s change management process.
The sample change management risks, controls, and potential worksteps may be considered when conducting an audit activity related to change management.