1.3 Explain the importance of change management processes and the impact to security

Question 1

Change Management Processes

Answer 1

1. Preparing: Assess current processes, gather resources, engage stakeholders
2. Creating a Vision: Define the future state, reasons for change, and success criteria to inspire stakeholder buy-in.
3. Implementing: Execute the plan with training, restructuring, and new tools; maintain communication and address feedback.
4. Verifying the Change: Measure outcomes using surveys, metrics, and interviews
5. Documenting the Change: Keep records, capture lessons learned, and improve future practices.

Question 2

Technical Implications of Changes

Answer 2

Review before the change:

• Allow/Deny Lists: Check who or what is allowed or blocked from accessing the system
• Restricted Activities: Make sure the changes won’t break rules or create security risks.
• Downtime: Plan when the system will be down so it doesn’t disrupt important work.
• Restarts: Some updates need the system to restart. Plan this carefully to avoid issues.
• Legacy Applications: Check compatibility.
• Dependencies: Check how different parts of the system depend on each other to prevent chain reactions