Change management
- Term
- Change management
- Exam
- CISA & CISM
- Definition
The process ensuring changes are requested, assessed, approved, tested and implemented in a controlled way.
- Explained
Change management ensures changes are requested, assessed for risk, approved, tested and implemented in a controlled way, with rollback plans. Auditors test it by sampling actual changes from systems and tracing them back to approvals, which reveals unauthorized changes.
- In practice
A database upgrade is requested, risk-assessed, approved by the change board, tested and deployed in a window.
- Often confused with
- Release management
- Exam angle
Test it from actual changes back to approvals.
- Related