Change Management

What is it and why is it important?

Change Management is the systematic approach to planning and implementing changes in an organization. The objective of change management is to ensure that any introduced change does not lead to reduced or compromised security. Lack of a consistent systematic change process and oversights can open the door to new vulnerabilities.

Change management should be included in software design, development, testing, evaluation, implementation, distribution, evolution, growth, ongoing operation, and modification.

To auditors, the important aspects that would be evaluated are:

Changes documentation that includes:

• Description
• Code review
• User acceptance testing /testing
• Deployment

How do I implement a Change Management Program?

At TrustCloud, a set of controls has been created to help implement a Change Management program. Review each article below for a deep dive on those controls.