ITSAC - Chapter 8

Change Control Management

is the structured process used to manage modifications in IT systems

IT and Organizational Change

involve modifications to systems, while organizational change involves shifts in processes and culture

Segregation of Duties

ensures that different individuals handle the initiation, approval, and implementation of changes.

change Control Process

Includes submitting change requests, assessing impact, obtaining approval, testing, implementing, and documenting changes to ensure consistency and control

Impact Assessment

evaluates how a proposed change will affect systems, users, and operations.

Testing and Implementation

ensures that changes work correctly before deployment, while implementation introduces approved changes into the production environment in a controlled manner

Documentation and Communication

Proper documentation records all changes, while communication ensures stakeholders are informed about system updates and impacts.

Change Control Procedures

define how changes are initiated, approved, and reviewed. They ensure that all members follow a consistent process.

Configuration Management

tracks and controls system components and ensures that all changes are properly recorded and managed

Software Configuration Management

ensures version control, consistency, and traceability of system changes throughout the lifecycle

Organizational Change Management

focuses on helping people adapt to changes through communication, training, and involvement.

Organizational Culture

influences how employees respond to change. A supportive culture improves adoption of new systems

Managing Change

requires aligning processes, minimizing customization, and providing training and communication

Change Control Audit

ensures that all system changes are authorized, tested, documented, and properly implemented.