6.5.1—Changes to all system components in the production environment are made according to established procedures that include: Reason for, and description of, the change.
>Requirement Description
Changes to all system components in the production environment are made according to established procedures that include: Reason for, and description of, the change. Documentation of security impact. Documented change approval by authorized parties. Testing to verify that the change does not adversely impact system security. For bespoke and custom software changes, all updates are tested for compliance with Requirement 6.2.4 before being deployed into production. Procedures to address failures and return to a secure state.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.