Change Control Management

1. Implementing policies, procedures, and techniques assist changes and modifications to systems (e.g., programs, applications, etc.) to be properly authorized, tested, approved, and carefully distributed or controlled. Without proper controls like the one above, there is a risk that unauthorized changes or modifications could introduce processing irregularities or malicious code, among many others. List examples of other risks that could potentially impact the security of the systems.

2. Explain the benefits for organizations of implementing a well-defined and structured change control management process.

3. Discuss the three types of changes typically implemented in systems and applications.

4. Name and describe four risks associated with the software release process.

5. Describe the controls typically included when following good software distribution practices.

6. Name and summarize the five criteria for approving changes.

7. Once approved, changes should be scheduled for implementation. At this point, all key people and departments affected by a change should be notified of the upcoming implementation. List those who may require such notification.

8. Summarize how the National Institute of Standards and Technology defines the process of software configuration management.

9. Describe the interdependencies between IT change management and organizational change management.

10. What is the objective of a change control management audit? List at least seven procedures in a change control management audit.