When auditing an application change control process, which of the following procedures should be included in the scope of the audit?

1) Ensure system change requests are formally initiated, documented, and approved.

2) Ensure processes are in place to prevent emergency changes from taking place.

3) Ensure changes are adequately tested before being placed into the production environment.

4) Evaluate whether the procedures for program change management are adequate.