Change Management
What is Change Management?
The processes, tools, and techniques for managing the people side of change to achieve required business outcomes, or the IT process for controlling modifications to hardware, software, and documentation to protect the environment from unintended consequences.
Terms that appear alongside change management
Each of these is named in at least one of the same controls as change management. The number is how many controls name both.
- audit 22 shared controls
- compliance 16 shared controls
- risk assessment 15 shared controls
- governance 15 shared controls
- cybersecurity 14 shared controls
- nist 14 shared controls
- management system 12 shared controls
- impact assessment 12 shared controls
Frameworks that govern change management
What the standards actually require on change management
Requirements naming change management across 6 standards, quoted from the control text.
Record a configuration baseline for every authorised change, so the approved state of each asset is known.
CCM-CCC-06 · Change Management Baseline →HKMA TM-G-1 IT Strategy + Policies + Risk + Development + Change. (1) IT STRATEGY AND PLANNING (TM-G-1.3.1) - documented + Board-approved IT strategy aligned with business strategy + risk appetite + technology innovation + customer experience + investment plan...
HKMA-TMG1-Strategy-Policies-RiskAssessment-Dev-Change · TM-G-1 IT Strategy + Policies + Risk Assessment + Project Management + System Development + Change Management →Section 3 establishes continual improvement of process performance and product quality. Section 3.1 Process Performance and Product Quality Monitoring: monitor and trend process performance (process capability Cp + Cpk + process performance Pp + Ppk) + product...
ICH-Q10-Section3-ContinualImprovement-ProcessPerformance-CAPA-ChangeMgmt-MgmtReview · ICH Q10 Section 3 - Continual Improvement + Process Performance and Product Quality Monitoring + CAPA + Change Management + Management Review →Requires supplier information security practice and service delivery to be monitored, reviewed and evaluated on a regular basis, and requires change within them to be managed.
iso-27002-2022::5.22 · Monitoring, review and change management of supplier services →Change management processes. Control from ITIL 4 framework, domain: ITIL 4: Service Transition.
ITIL4-06 · Change management processes →Emergency changes follow an expedited but documented approval process and receive retroactive review
CO-ChangeMgmt-4 · Emergency Change Management →Questions people ask about change management
What is Change Management?
Why is Change Management important for compliance?
Which compliance frameworks address Change Management?
Where can I learn more about Change Management?
See how Change Management applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.