5.1.2.1—Managing Changes to Service Providers
>Control Description
Any changes to services provided by a service provider shall be managed by the CJA, authorized agency, or FBI. This includes provision of services, changes to existing services, and new services. Evaluation of the risks to the agency shall be undertaken based on the criticality of the data, system, and the impact of the change.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.