What to Provide
A change ticket for each sampled production change.
The evidence should demonstrate:
The change description was documented, by who and when
When the change was tested, who performed the testing, and results of the testing
When the change was reviewed and approved, and by who
The date the change was implemented into production.
NOTE: The audit team will communicate sample selections once they have been finalized. Please refrain from attaching evidence in this ER until samples have been communicated.
Evidence Format
Exported document in a common file type such as .docx, .csv, or .pdf or screenshots or exported images in a common image file type such as .jpg, .png, or .pdf.
Associated Unified Control ID | Associated Framework Control |
CTRL-190 | LCL-53 |