Change Management
What is Change Management?
The processes, tools, and techniques for managing the people side of change to achieve required business outcomes, or the IT process for controlling modifications to hardware, software, and documentation to protect the environment from unintended consequences.
Terms that appear alongside change management
Each of these is named in at least one of the same controls as change management. The number is how many controls name both.
- audit 22 shared controls
- compliance 16 shared controls
- risk assessment 15 shared controls
- governance 15 shared controls
- cybersecurity 14 shared controls
- nist 14 shared controls
- management system 12 shared controls
- impact assessment 12 shared controls
Frameworks that govern change management
What the standards actually require on change management
Requirements naming change management across 6 standards, quoted from the control text.
Management implements a process to transition system changes from strategic change management into day-to-day operations as part of the development life cycle, transferring responsibilities and the knowledge gained in a useful format to the personnel who opera...
ffiec-it-examination-handbook::AIO-III.D.2 · III.D.2 Transitioning From Strategic Change Management (Architecture, Infrastructure, and Operations) →Agencies must record every change to gateways as required by the agency's Change Management Policy.
new-zealand-information-security-manual-nzism::19.1.22.C.02 · 19.1.22.C.02 Document gateway changes under change management policy →A change management procedure is put in place to control the risk that comes from changing assets the organisation owns, controls or uses.
cloud-security-alliance-cloud-controls-matrix-ccm-v4-1::CCC-03 · Change Management Technology →Every change to information systems and processing facilities is to pass through the change management procedures. Purpose: keep information secure while changes are carried out.
iso-27002-2022::8.32 · Change management →A change management policy is established and documented that defines the service components and other items under change management control, the categories of change (emergency changes included) and how each is managed, and the criteria for deciding which cha...
iso-iec-20000-1-2018::8.5.1.1 · 8.5.1.1 Change management policy →Record a configuration baseline for every authorised change, so the approved state of each asset is known.
CCM-CCC-06 · Change Management Baseline →Questions people ask about change management
What is Change Management?
Why is Change Management important for compliance?
Which compliance frameworks address Change Management?
Where can I learn more about Change Management?
See how Change Management applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.