ID.RA-07 Changes and exceptions are managed, assessed for risk impact, recorded, and tracked

Statement

Changes and exceptions are managed, assessed for risk impact, recorded, and tracked

Guidance

Implement and follow procedures for the formal documentation, review, testing, and approval of proposed changes and requested exceptions

Guidance

Document the possible risks of making or not making each proposed change, and provide guidance on rolling back changes

Guidance

Document the risks related to each requested exception and the plan for responding to those risks

Guidance

Periodically review risks that were accepted based upon planned future actions or milestones

1. Resumen

1.1 Referencias

• 6.4 Change management, repairs and maintenance

1.2 Requisitos identificados

1.3 Regulaciones relacionadas

2. Requisitos identificados

3. Regulaciones relacionadas

Incidencias vinculadas

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final