CCI-002058

Employ automated mechanisms to notify organization-defined personnel when approved changes to the system are completed.

Implementation Guidance

The organization being inspected/assessed notifies at a minimum, the CCB when approved changes to the information system are completed. The organization must maintain an audit trail of notifications of completed changes to the information system. DoD has defined the personnel as at a minimum, the CCB.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the audit trail of notifications of completed changes to the information system to ensure the organization being inspected/assessed notifies at a minimum, the CCB when approved changes to the information system are completed. DoD has defined the personnel as at a minimum, the CCB.

Compelling Evidence

1.) Documentation that defines the personnel to be notified when approved changes are completed 2.) Audit logs of notifications of completed changes

The controls below (if any) were marked by NIST as being related to CCI-002058.