Change Control
What is Change Control?
A formal process for managing changes to systems, processes, and configurations to minimize disruption and maintain system integrity.
Terms that appear alongside change control
Each of these is named in at least one of the same controls as change control. The number is how many controls name both.
- audit 21 shared controls
- configuration management 19 shared controls
- integrity 16 shared controls
- baseline 16 shared controls
- change management 10 shared controls
- audit trail 9 shared controls
- compliance 8 shared controls
- vulnerability 8 shared controls
Frameworks that govern change control
What the standards actually require on change control
Requirements naming change control across 6 standards, quoted from the control text.
Test, validate, and document changes to the system before finalizing the implementation of the changes.
NIST800-CM-3(2) · CM-3(2) Configuration Change Control | Testing, Validation, and Documentation of Changes →Change control records, evaluates, resolves and approves changes under the CM plan, starting no later than the credit baseline. It protects items against unauthorised change; assesses whether the configuration identity must change;
do-254-ed-80-design-assurance-guidance-for-airborne-electronic-hardware::7.2.4 · 7.2.4 Change control →Control changes to the baseline configuration through documented requests, approvals, testing, and tracking.
SP800-128-CHANGE-CONTROL · Configuration Change Control →Test, validate, and document changes to the system before finalizing the implementation of the changes.
nist-sp-800-53-revision-5-1-high::CM-3(2) · CM-3(2) Configuration Change Control | Testing, Validation, and Documentation of Changes →Every change to network connections and every change to the configuration of network security controls must be approved and handled through the formal change control process defined in Requirement 6.5.1.
1.2.2 · 1.2.2 Network connection and NSC changes under change control →Set policies and procedures, scaled to risk, for controlling changes to SLAs and for reviewing and auditing them.
awwa-cybersecurity-guidance-for-the-water-sector-american-water-works-association::CM-6 · CM-6 Change control, review and audit of SLAs →Questions people ask about change control
What is Change Control?
Why is Change Control important for compliance?
Which compliance frameworks address Change Control?
Where can I learn more about Change Control?
See how Change Control applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.