Morgan Manufacturing operates in an industry in which frequent changes in market conditions results in a hectic and volatile IT environment within the company. To keep abreast, Morgan's system development team are engaged in a considerable level of new program development and application change activities. To efficiently manage the workload, the director of IT has combined the functions of systems development and program change into a single department. This allows programmers of new applications to also maintain those applications. To achieve cross training, programmers also maintain applications originally programmed by other IT personnel. This has resulted in an "open" library policy that allows programmers to access all programs stored in the SPL and download them to personal computers for maintenance. The immediate effect of this policy has been an increase in the work flow by reducing the startup time needed by programmers to become familiar with the systems being modified. It also reduces the time spent on system documentation. Since the designer and the maintenance programmer is the same person, highly detailed and standardized documentation is not needed.

1) Discuss the risk potential related to Morgan Manufacturing's program change procedures.

2) Discuss the controls that would reduce the risks described in (b) above.

Each question requires at least three hundred and fifty words.