Change Management

What is change management, and why is it important?

Change management is a systematic approach to planning and implementing changes in an organization. The objective of this is to ensure that any introduced change does not lead to reduced or compromised security. Lack of a consistent, systematic change process and oversights can open the door to new vulnerabilities.

It should be included in software design, development, testing, evaluation, implementation, distribution, evolution, growth, ongoing operation, and modification.

For auditors, the important aspects to be evaluated are:

Change documentation that includes:

• Description
• Code review
• User acceptance testing
• Deployment

How do I implement it?

At TrustCloud, a set of controls is created to help implement a change management program. Review each article below to learn more about these controls.