Skip to main content

๐Ÿ’ผ CC8.1 The entity authorizes, designs, develops or acquires, configures, documents, tests, approves, and implements changes to infrastructure, data, software, and procedures to meet its objectives.

  • Contextual name: ๐Ÿ’ผ CC8.1 The entity authorizes, designs, develops or acquires, configures, documents, tests, approves, and implements changes to infrastructure, data, software, and procedures to meet its objectives.

  • ID: /frameworks/soc-2/cc8/01

  • Located in: ๐Ÿ’ผ CC8 Change Management

Descriptionโ€‹

Empty...

Similarโ€‹

Sub Sectionsโ€‹

SectionSub SectionsInternal RulesPoliciesFlags
๐Ÿ’ผ CC8.1-1 Manages Changes Throughout the System Lifecycle3
๐Ÿ’ผ CC8.1-2 Authorizes Changes3
๐Ÿ’ผ CC8.1-3 Designs and Develops Changes3
๐Ÿ’ผ CC8.1-4 Documents Changes3
๐Ÿ’ผ CC8.1-5 Tracks System Changes3
๐Ÿ’ผ CC8.1-6 Configures Software3
๐Ÿ’ผ CC8.1-7 Tests System Changes3
๐Ÿ’ผ CC8.1-8 Approves System Changes3
๐Ÿ’ผ CC8.1-9 Deploys System Changes3
๐Ÿ’ผ CC8.1-10 Identifies and Evaluates System Changes3
๐Ÿ’ผ CC8.1-11 Identifies Changes in Infrastructure, Data, Software, and Procedures Required to Remediate Incidents3
๐Ÿ’ผ CC8.1-12 Creates Baseline Configuration of IT Technology3
๐Ÿ’ผ CC8.1-13 Provides for Changes Necessary in Emergency Situations3
๐Ÿ’ผ CC8.1-14 Manages Patch Changes3
๐Ÿ’ผ CC8.1-15 Considers System Resilience3
๐Ÿ’ผ CC8.1-16 Protects Confidential Information
๐Ÿ’ผ CC8.1-17 Protects Personal Information
๐Ÿ’ผ CC8.1-18 Privacy by Design