What to Provide
Change management policy
The evidence should demonstrate the process for documentation, testing, review, and approval of changes to information systems.
Evidence Format
Exported word processing document in a common file type such as .docx or .pdf.
Associated Unified Control ID | Associated Framework Control |
CTRL-190 | LCL-28 |