CCI-000323

Use organization-defined automated mechanisms to notify organization-defined approval authorities of proposed changes to the system and request change approval.

Implementation Guidance

The organization being inspected/assessed documents and employs the automated mechanisms (e.g., Remedy, ticketing mechanism, etc) to notify designated approval authorities of proposed changes to the information system and request change approval.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines documentation of the use of the identified automated mechanisms to ensure that the identified system notifies designated approval authorities of proposed changes to the information system and request change approval. The organization being inspected/assessed may be required to demonstrate use of their identified automated mechanisms.

Compelling Evidence

1.) Documentation of the use of the identified automated mechanisms 2.) Samples of notifications to designated approval authorities

The controls below (if any) were marked by NIST as being related to CCI-000323.