Skip to main content

💼 PR.IP-3: Configuration change control processes are in place

Description​

Empty...

Similar​

  • Sections
    • /frameworks/iso-iec-27001-2013/12/01/02
    • /frameworks/iso-iec-27001-2013/12/05/01
    • /frameworks/iso-iec-27001-2013/12/06/02
    • /frameworks/iso-iec-27001-2013/14/02/02
    • /frameworks/iso-iec-27001-2013/14/02/03
    • /frameworks/iso-iec-27001-2013/14/02/04
    • /frameworks/nist-sp-800-53-r4/cm/03
    • /frameworks/nist-sp-800-53-r4/cm/04
    • /frameworks/nist-sp-800-53-r4/sa/10
  • Internal
    • ID: dec-c-f6cd354d

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 ISO/IEC 27001:2013 → 💼 A.12.1.2 Change management
💼 ISO/IEC 27001:2013 → 💼 A.12.5.1 Installation of software on operational systems44
💼 ISO/IEC 27001:2013 → 💼 A.12.6.2 Restrictions on software installation
💼 ISO/IEC 27001:2013 → 💼 A.14.2.2 System change control procedures
💼 ISO/IEC 27001:2013 → 💼 A.14.2.3 Technical review of applications after operating platform changes
💼 ISO/IEC 27001:2013 → 💼 A.14.2.4 Restrictions on changes to software packages
💼 NIST SP 800-53 Revision 4 → 💼 CM-3 CONFIGURATION CHANGE CONTROL6
💼 NIST SP 800-53 Revision 4 → 💼 CM-4 SECURITY IMPACT ANALYSIS2
💼 NIST SP 800-53 Revision 4 → 💼 SA-10 DEVELOPER CONFIGURATION MANAGEMENT6

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 NIST CSF v2.0 → 💼 ID.RA-07: Changes and exceptions are managed, assessed for risk impact, recorded, and tracked24

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags

Policies (4)​

PolicyLogic CountFlags
📝 AWS RDS Instance Auto Minor Version Upgrade is not enabled 🟠🟢1🟠 x1, 🟢 x6
📝 Azure App Service does not run the latest Java version 🟢🟢 x3
📝 Azure App Service does not run the latest PHP version 🟢🟢 x3
📝 Azure App Service does not run the latest Python version 🟢🟢 x3

Internal Rules​

RulePoliciesFlags
✉️ dec-x-879aa9961
✉️ dec-x-215302da1
✉️ dec-x-a20e54a01
✉️ dec-x-f82b98491