CCI-000329

The organization documents changes to the information system before implementing the changes on the operational system.

Implementation Guidance

The organization being inspected/assessed documents and implements a process to document changes to the information system before implementing the changes on the operational system.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process as well as documentation of changes to the information system to ensure the organization has established, published, and is complying with the requirement to document all changes to be made to its operational information system(s) prior to their implementation.

Compelling Evidence

1.) Change management testing procedures

The controls below (if any) were marked by NIST as being related to CCI-000329.