graphgrc

SCF - CHG-02.1 - Prohibition Of Changes

Mechanisms exist to prohibit unauthorized changes, unless organization-approved change requests are received.

Mapped framework controls

SOC 2

Control questions

Does the organization prohibit unauthorized changes, unless organization-approved change requests are received?