IT Change Management, 4th Edition
Global Guidance | Global Technology Audit Guide (GTAG) | Recommended | Issued and Effective | March 19, 2026
Copyright Notice All content is protected by international copyright laws. You may reference or quote small portions of this document with proper attribution to The IIA, but unauthorized reproduction, distribution, or use beyond that, other than for your own personal use, is strictly prohibited and may constitute a violation of copyright law, resulting in civil and criminal penalties. Contact copyright@theiia.org for permission to use our materials.

With effective change management, organizations can address risk, reduce unplanned work, limit unintended results, and improve service quality.
This guide helps internal auditors:
- Understand the growing complexities and importance of change management.
- Learn what questions to ask to assess the organization’s change management capability.
- Recognize leading practices.
- Assess change management controls.
The guide includes a customizable IIA Audit Tool: IT Change Management – Risks, Controls, and Walkthrough Questions to assess key areas related to change management.
This updated version supersedes all previous editions of this title.
Tool to use with this practice guide
IT Change Management – Risks, Controls, and Walkthrough Questions