Section 12.109 Change Management Flashcards
Objectives 1.3 Explain the importance of change management processes and the impact to security. Objectives 4.1 Given a scenario, you must be able to apply common security techniques to computing resources. Objectives 4.2 Explain the security implications of proper hardware, software, and data asset management.
Change Management
Orchestrated strategy to transition teams, departments, and organisations from existing state to a more desirable future state
Change is essential but requires
○ Precision
○ Planning
○ Structured approach
Ensures changes are properly controlled, planned, and integrated to avoid disruptions
Challenges of Change
■ Unplanned or poorly coordinated changes can lead to resistance and confusion
■ Even seemingly simple changes, like software upgrades, can cause issues
■ Existing processes become disrupted by changes, impacting efficiency
Change Approval and Assessment
■ Changes must be approved and assessed
■ Organisational processes and procedures for change approval
■ Assessment evaluates value and potential disruptions
Who approves changes in organisations?
Change Advisory Board (CAB)
Body of representatives from various parts of an organization that is responsible for evaluation of any proposed changes
● Evaluates proposed changes before approval, assesses viability, impacts, and alignment with objectives
Change Owner
■ Individual or team responsible for initiating change request
■ Advocates for the change, details reasons, benefits, and challenges
■ Key in presenting the case for the change
Stakeholders
Individuals or teams with a vested interest in the proposed change
■ Directly impacted or involved in assessment and implementation
These individuals or teams must be:
● Consulted
● Their feedback considered
● Their concerns addressed
Include technical, business, and end-user stakeholders
Impact Analysis
■ Integral part of the Change Management process
■ Essential before implementing proposed changes
■ Assesses potential fallout, immediate effects, long-term impacts
■ Identifies challenges and prepares for maximising benefits