When to use this
Use this checklist during an internal audit of software installation, release, testing, licence, support, and rollback controls for operational systems.
Related controls
- A.8.19 Installation of Software on Operational Systems
- A.8.19 Audit Evidence Pack
- Operational Software Installation Procedure
- Operational Software Release and Installation Record
- Software Rollback and Fallback Checklist
- Software Licence and Support Verification Checklist
Audit checklist
- Review software installation procedure.
- Sample production installation or release records.
- Verify business justification and approval.
- Review test and regression evidence.
- Check installation was performed by authorized staff.
- Review installation logs.
- Check backup and rollback evidence.
- Verify licence entitlement and support status.
- Check whether source code is present on operational systems.
- Interview developers and maintenance staff on process awareness.
Findings table
| System/software | Expected evidence | Observed evidence | Gap | Finding type | Action owner |
|---|---|---|---|---|---|
| TBD | TBD | TBD | TBD | NC / observation / conforming | TBD |
- Template
- Audit
- Iso27001
- A8 19
Note Metadata
Aliases: A.8.19 Software Installation Audit Checklist
Source: 90 Templates/A.8.19 Audit Checklist.md
Graph-sourced resources
Templates and evidence
Auditor evidence packs
Evidence collections and audit-facing verification material.
Related Notes
- A.8.19 Audit Evidence Pack
- Audit Evidence MOC
- ISO 27001 A.8.19 - Installation of Software on Operational Systems
- A.8 Technological Controls MOC
- A.8 Technological Controls Audit Guide
- A.8 Technological Controls Implementation Audit Risk Mapping
- Operational Software Installation Procedure
- Operational Software Release and Installation Record
- Software Licence and Support Verification Checklist
- Software Rollback and Fallback Checklist
- Audit Evidence Index
- Templates MOC