Skip to main content

Notifications

Announcements

No record found.

Finance | Project Operations, Human Resources, ...
Suggested answer

Tracking code deployments from TFS/DevOps to Production for SOX purposes

Posted on by Microsoft Employee

We're an AX 2012 customer that does a fair amount of code customization and we recently became a publicly traded company so are in need of meeting SOX requirements.  We're walking through our Change Management (CM) control and are having a big issue meeting it because there is no direct link between code check-ins to DevOps and what gets pushed into Production.

Our code development process is the following:

1)  Developers make changes on their dev boxes and code changes are checked into DevOps.

2)  We run a period code-build process on a dedicated AX build server which pulls in all DevOps changes and final output is an AX modelstore file.

3)  Modelstore file is promoted to a Test AX environment where user validation occurs.

4)  Once all validation has occurred, the modelstore file will get promoted into Production.

The issue we're running into with our auditors is that there isn't any kind of hard connection between DevOps and final code promotion into AX.  Wondering what other SOX required companies have done to handle this?

Also, what have you done when needing to push a hotfix (XPO) into Production?

  • Martin Dráb Profile Picture
    Martin Dráb 230,214 Most Valuable Professional on at
    RE: Tracking code deployments from TFS/DevOps to Production for SOX purposes

    What kind of connection are you looking for? Would assinging a unique build number of the model satisfy your auditors?

    When somebody asks you tu push an .xpo to production, say "no". Kick of a build and deploy a model instead. If you want to use .xpo because you don't want to deploy all current changes, version control systems have a solution for you: branches.

  • Suggested answer
    RE: Tracking code deployments from TFS/DevOps to Production for SOX purposes

    Hi Swallman67,

    From the AX 2012 support perspective, I'm not aware of anything but hopefully someone in the community can assist.  One thought, is this more of a DevOps question vs AX?

    Ex. - https://devblogs.microsoft.com/buckh/using-branching-in-source-control-to-meet-sarbanes-oxley-requirements/ 

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

December Spotlight Star - Muhammad Affan

Congratulations to a top community star!

Top 10 leaders for November!

Congratulations to our November super stars!

Tips for Writing Effective Suggested Answers

Best practices for providing successful forum answers ✍️

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 291,280 Super User 2024 Season 2

#2
Martin Dráb Profile Picture

Martin Dráb 230,214 Most Valuable Professional

#3
nmaenpaa Profile Picture

nmaenpaa 101,156

Leaderboard

Product updates

Dynamics 365 release plans