Describe the purpose of change management.

Question

What will be an ideal response?

Answer 1

Change management seeks to prevent changes that could detrimentally affect the security of a system. In its entirety, the CCM process reduces the risk that any changes made to a system (insertions, installations, deletions, uninstallations, or modifications) result in a compromise to system or data confidentiality, integrity, or availability. It does this by providing a repeatable mechanism that effects system modifications in a controlled environment. In accordance with the change management process, system changes must be tested prior to implementation to observe the effects of the change, thereby minimizing the risk of adverse results.