Change Management and Control Policy

Purpose

1. The purpose of this policy is to establish management direction and high-level objectives for change management and control. This policy will ensure the implementation of change management and control strategies to mitigate associated risks such as:

• 
  Information being corrupted and/or destroyed;
  
• 
  Computer performance being disrupted and/or degraded;
  
• 
  Productivity losses being incurred; and
  
• 
  Exposure to reputational risk.
  

4. References and definitions

   1. Normative references

      1. The following documents contain provisions that, through reference in the text, constitute requirements of this policy. At the time of publication, the editions indicated were valid. All standards and specifications are subject to revision, and parties to agreements based on this policy are encouraged to investigate the possibility of applying the most recent editions of the documents listed below.

• 
  Information Security Policy (overall)
  
• 
  Information Security - Systems Development and Maintenance Policy
  
• 
  Information Security - Business Continuity Management
  
• 
  Information Security - Physical Asset Classification and Control Policy
  
• 
  Information Security – Change Control Procedure
  

1. 
   
   Download 85.34 Kb.
   
   Share with your friends: