We're an AX 2012 customer that does a fair amount of code customization and we recently became a publicly traded company so are in need of meeting SOX requirements. We're walking through our Change Management (CM) control and are having a big issue meeting it because there is no direct link between code check-ins to DevOps and what gets pushed into Production.
Our code development process is the following:
1) Developers make changes on their dev boxes and code changes are checked into DevOps.
2) We run a period code-build process on a dedicated AX build server which pulls in all DevOps changes and final output is an AX modelstore file.
3) Modelstore file is promoted to a Test AX environment where user validation occurs.
4) Once all validation has occurred, the modelstore file will get promoted into Production.
The issue we're running into with our auditors is that there isn't any kind of hard connection between DevOps and final code promotion into AX. Wondering what other SOX required companies have done to handle this?
Also, what have you done when needing to push a hotfix (XPO) into Production?
