graphgrc

SCF - CHG-02.2 - Test, Validate & Document Changes

Mechanisms exist to appropriately test and document proposed changes in a non-production environment before changes are implemented in a production environment.

Mapped framework controls

ISO 27002

• A.8.19
• A.8.32

NIST 800-53

• CM-3(2)

SOC 2

• CC3.4
• CC8.1

Control questions

Does the organization appropriately test and document proposed changes in a non-production environment before changes are implemented in a production environment?

This site is open source. Improve this page.