CCC-05: Production Changes

PF v1.0 References:

Next Version:

Info icon.

The next version of the control set incorporates all or part of this control into: CCC-01: Change Management Policy and Procedures, CCC-03: Change Management Technology.

Control Statement

Policies and procedures shall be established for managing the risks associated with applying changes to:

  • Business-critical or customer (tenant)-impacting (physical and virtual) applications and system-system interface (API) designs and configurations.
  • Infrastructure network and systems components. Technical measures shall be implemented to provide assurance that all changes directly correspond to a registered change request, business-critical or customer (tenant), and/or authorization by, the customer (tenant) as per agreement (SLA) prior to deployment.

from Cloud Controls Matrix

[csf.tools Note: For more information on the Cloud Controls Matrix, visit the CSA Cloud Controls Matrix Homepage.]

Cloud Control Matrix is Copyright 2023 Cloud Security Alliance.