Morland-Austin IT GRC Knowledge Base

Manage Problems & Incidents

IT GRC Knowledge Base » IT Compliance Management » IT Compliance Management – SOX 404 » SOX IT Controls » Manage Problems & Incidents

This article provides an overview of SOX 404 control Manage Problems & Incidents.

The typical SOX 404 IT controls for Manage Problems and Incidents are as follows.

Description: A documented process is enforced for the management of problems and incidents.

Control Objective: Incidents and problems are reported, classified, tracked and resolved in a timely manner.

Typical Evidence:

  1. There is a documented process in place for defined incidents and related problems.
  2. The process includes classification of severity.
  3. The process includes escalation procedures.
  4. The process includes resolution procedures.
  5. The process includes service level standards.
  6. The process requires closure activities.

For more information please contact Morland-Austin at info@morland-austin.com.