CCC-05: Production Changes
Control Family:
Threats Addressed:
Next Version:
- Cloud Controls Matrix v4.0:
- CCC-05: Change Agreements
The next version of the control set incorporates all or part of this control into: CCC-01: Change Management Policy and Procedures, CCC-03: Change Management Technology.
Control Statement
Policies and procedures shall be established for managing the risks associated with applying changes to:
- Business-critical or customer (tenant)-impacting (physical and virtual) applications and system-system interface (API) designs and configurations.
- Infrastructure network and systems components. Technical measures shall be implemented to provide assurance that all changes directly correspond to a registered change request, business-critical or customer (tenant), and/or authorization by, the customer (tenant) as per agreement (SLA) prior to deployment.
from Cloud Controls Matrix
[csf.tools Note: For more information on the Cloud Controls Matrix, visit the CSA Cloud Controls Matrix Homepage.]
Cloud Control Matrix is Copyright 2023 Cloud Security Alliance.