After ensuring that security is set up to ensure proper segregation of duties the next area of concern surrounding security is with regards to system changes.
The goal of auditing the access, steps and procedures for system updates is to ensure proper controls over change management of the system and to ensure that proper testing and authorization procedures are being used.