CHM-03—Segregation of Duties
>Control Description
Changes to the production environment are implemented by authorized personnel.
Theme
Process
Type
Preventive
Policy/Standard
Change Management Policy>Implementation Guidance
1. Ensure that the permission to implement changes to the production is limited to few authorized personnels. 2. Ensure that the change implementor is not the change approver.
>Testing Procedure
1. Inspect Change Management tracking tool and for a sample of changes, inspect that change tickets were launched and appropriately approved.
>Audit Artifacts
E-CHM-02
E-CHM-03
>Framework Mappings
Cross-framework mappings provided by Adobe CCF Open Source under Creative Commons License.
Ask AI
Configure your API key to use AI features.