1.3 Explain the importance of change management processes and the impact to security.

True or False? The approval process contains the following steps:

• Complete the requested forms

• Determine the purpose of the change

• Identify the scope of the change

• Schedule a date and time of the change

• Determine affected systems and the impact

• Analyze the risk associated with the change

• Get approval from the change control board

• Get end-user acceptance after the change is complete

True. For video reference, refer to Professor Messer’s video guide labeled “Change Management”.

Why are stakeholders an important consideration when making achange?

This can either be one person, multiple people or the entire company affected by a change. It’s important to know who will all be affected by a single change.

True or false? The impact analysis only involves a change that needs to be made.

False. This can also affect a risk of what could happen if a change is not made. An example could be if a system wasn’t patched, what would the impact be. If it was patched, would something else break?

What is a SOP?

A SOP (Standard Operating Procedure) is a manual that is documented on how a process or procedure is handled. Any change made to a process or procedure are reflected in the standards.

True or False? The allow list lets you run any application that has been approved.

False. This list blocks any application on the network unless specifically approved to be ran. This list is more strict and each application has to be approved before it can be ran on the network.

What’s the difference between an allow list and deny list?

Allow List: This list allows only approved applications or services to be ran on a network, blocking all other applications or services unless approved.

Deny List: This list allows any application or service to be ran without approval, but certain applications and services can be added to this list to prevent them from being ran on the network.

What is version control?

Version control is a way to manage different versions of an application or operating system that requires a change to be made. If the change made makes things worse or changes something else, then you could easily revert the change by going back to the previous version. An example would be windows updates and the ability to rollback updates if an update has a problem.