CISSP考试指南笔记：8.5 变更控制

Change management is a systematic approach to deliberately regulating the changing nature of projects, including software development projects.

Change Control

Change control is the process of controlling the specific changes that take place during the life cycle of a system and documenting the necessary change control activities.

A process for dealing with changes needs to be in place at the beginning of a project so everyone knows how changes are dealt with and what is expected of each entity when a change request is made.

Change control processes should be evaluated during system audits.

The changes to systems may require another round of certification and accreditation.

Change control is part of change management.