+KSI-CMT Change Management
---+KSI-CMT-LMC Logging Changes
---+KSI-CMT-RMV Redeploying vs Modifying
---+KSI-CMT-RVP Reviewing Change Procedures
---+KSI-CMT-VTD Validating Throughout Deployment

KSI-CMT Change Management

1. Visão geral

Título	Norma
KSI-CMT-LMC Logging Changes	Modifications to the cloud service offering are logged and monitored. NIST SP 800-53 Rev. 5 controls: AU-2, CA-7(4), CM-3, CM-3(1), CM-3(2), CM-3(6), CM-4(2), CM-6, CM-8(3) Defined terms: Cloud Service Offering
KSI-CMT-RMV Redeploying vs Modifying	Changes to machine-based information resources are executed through the redeployment of version controlled resources rather than direct modification wherever reasonable. NIST SP 800-53 Rev. 5 controls: CM-2, CM-3, CM-5, CM-6, CM-7, CM-8(1), SI-3 Defined terms: Information Resource, Machine-Based (Information Resources)
KSI-CMT-RVP Reviewing Change Procedures	The effectiveness of documented change management procedures is persistently reviewed. NIST SP 800-53 Rev. 5 controls: CM-3, CM-3(2), CM-3(4), CM-5, CM-7(1), CM-9 Defined terms: Persistently
KSI-CMT-VTD Validating Throughout Deployment	Persistent testing and validation of changes throughout deployment is automated. NIST SP 800-53 Rev. 5 controls: CM-3, CM-3(2), CM-4(2), CM-6(2), IR-9(4), SI-2 Defined terms: Persistently, Validation

1.1 Referências

1.2 Requisitos identificados

1.3 Regulamentos relacionados

2. Requisitos identificados

Requisitos
Fonte	Requisito

3. Regulamentos relacionados

Regulamentos
Fonte	Regulamentação

FedRAMP Consolidated Rules -
EN: FedRAMP® Consolidated Rules of the Federal Risk and Authorization Management Program, U.S. General Services Administration (GSA), https://www.fedramp.gov/, from their machine-readable version (FedRAMP/rules). Works of the U.S. Government are not subject to copyright protection in the United States (17 U.S.C. § 105; GSA website policies); GSA dedicated its machine-readable FedRAMP content to the public domain worldwide (CC0 1.0). FedRAMP® is a registered trademark of GSA; GRCA is not affiliated with, nor endorsed by, GSA or FedRAMP. Divided into sections and converted into the GRCA format, the wording unchanged, linked to the NIST SP 800-53 controls they name. Only the version published by FedRAMP is authoritative.

DE: FedRAMP® Consolidated Rules des Federal Risk and Authorization Management Program, U.S. General Services Administration (GSA), https://www.fedramp.gov/, aus ihrer maschinenlesbaren Fassung (FedRAMP/rules). Werke der US-Regierung sind in den USA urheberrechtlich nicht geschützt (17 U.S.C. § 105; Website-Richtlinien der GSA); die GSA hat ihre maschinenlesbaren FedRAMP-Inhalte weltweit gemeinfrei gestellt (CC0 1.0). FedRAMP® ist eine eingetragene Marke der GSA; GRCA steht in keiner Verbindung zur GSA oder zu FedRAMP und wird von ihnen nicht unterstützt. In Abschnitte aufgeteilt und in das GRCA-Format umgewandelt, der Wortlaut unverändert, mit den genannten Controls aus NIST SP 800-53 verknüpft. Maßgeblich ist allein die von FedRAMP veröffentlichte Fassung.