Section 12.109 Change Management Flashcards

Objectives 1.3 Explain the importance of change management processes and the impact to security. Objectives 4.1 Given a scenario, you must be able to apply common security techniques to computing resources. Objectives 4.2 Explain the security implications of proper hardware, software, and data asset management.

1
Q

Change Management

A

Orchestrated strategy to transition teams, departments, and organisations from existing state to a more desirable future state

Change is essential but requires

○ Precision
○ Planning
○ Structured approach

Ensures changes are properly controlled, planned, and integrated to avoid disruptions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Challenges of Change

A

■ Unplanned or poorly coordinated changes can lead to resistance and confusion

■ Even seemingly simple changes, like software upgrades, can cause issues

■ Existing processes become disrupted by changes, impacting efficiency

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Change Approval and Assessment

A

■ Changes must be approved and assessed

■ Organisational processes and procedures for change approval

■ Assessment evaluates value and potential disruptions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Who approves changes in organisations?

Change Advisory Board (CAB)

A

Body of representatives from various parts of an organization that is responsible for evaluation of any proposed changes

● Evaluates proposed changes before approval, assesses viability, impacts, and alignment with objectives

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Change Owner

A

■ Individual or team responsible for initiating change request

■ Advocates for the change, details reasons, benefits, and challenges

■ Key in presenting the case for the change

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Stakeholders

A

Individuals or teams with a vested interest in the proposed change

■ Directly impacted or involved in assessment and implementation

These individuals or teams must be:
● Consulted
● Their feedback considered
● Their concerns addressed

Include technical, business, and end-user stakeholders

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Impact Analysis

A

■ Integral part of the Change Management process

■ Essential before implementing proposed changes

■ Assesses potential fallout, immediate effects, long-term impacts

■ Identifies challenges and prepares for maximising benefits

How well did you know this?
1
Not at all
2
3
4
5
Perfectly