CompTIA Domain 1.3

These flashcards cover key concepts from the CompTIA Security+ (SY0-701) lecture notes, focusing on change management processes and their impact on security.

Approval Process

Formal authorization procedure for proposed changes to ensure they align with organizational and security policies.

Ownership

Identifies who is responsible for a system, process, or asset to maintain accountability.

Stakeholders

Individuals or groups impacted by or responsible for approving the change.

Impact Analysis

Evaluates how a proposed change affects systems, users, and overall security posture.

Test Results

Provide validation that the change performs as intended without introducing vulnerabilities.

Backout Plan

Defines steps to revert to a previous state if a change causes issues or instability.

Maintenance Window

Scheduled time frame for implementing changes with minimal disruption.

Standard Operating Procedure (SOP)

Established, documented process ensuring consistency and compliance with policies.

Allow Lists / Deny Lists

Control which applications, IPs, or users are permitted or blocked, preventing unauthorized access.

Restricted Activities

Define actions that are prohibited for users or systems to reduce security risks.

Downtime

The period when systems are unavailable during maintenance or unexpected failure, potentially affecting availability.

Service Restart

Required when a service must be stopped and restarted to apply updates or configuration changes.

Application Restart

Necessary to apply updates or configuration changes that impact software performance.

Legacy Applications

Older software that may not support current security standards but remains essential to business operations.

Dependencies

Components or systems that rely on one another; changing one may impact others unintentionally.

Updating Diagrams

Ensures network and system architecture visuals reflect current configurations after changes.

Updating Policies/Procedures

Keeps administrative and technical documentation aligned with operational changes.

Version Control

Tracks and manages changes to files, configurations, or code to ensure integrity, accountability, and rollback capability.