Skip to main content

๐Ÿ’ผ CC8.1 The entity authorizes, designs, develops or acquires, configures, documents, tests, approves, and implements changes to infrastructure, data, software, and procedures to meet its objectives.

  • Contextual name: ๐Ÿ’ผ CC8.1 The entity authorizes, designs, develops or acquires, configures, documents, tests, approves, and implements changes to infrastructure, data, software, and procedures to meet its objectives.

  • ID: /frameworks/soc-2/cc8/01

  • Located in: ๐Ÿ’ผ CC8 Change Management

Descriptionโ€‹

Empty...

Similarโ€‹

Sub Sectionsโ€‹

SectionSub SectionsInternal RulesPoliciesFlags
๐Ÿ’ผ CC8.1-1 Manages Changes Throughout the System Lifecycle
๐Ÿ’ผ CC8.1-2 Authorizes Changes
๐Ÿ’ผ CC8.1-3 Designs and Develops Changes
๐Ÿ’ผ CC8.1-4 Documents Changes
๐Ÿ’ผ CC8.1-5 Tracks System Changes
๐Ÿ’ผ CC8.1-6 Configures Software
๐Ÿ’ผ CC8.1-7 Tests System Changes
๐Ÿ’ผ CC8.1-8 Approves System Changes
๐Ÿ’ผ CC8.1-9 Deploys System Changes
๐Ÿ’ผ CC8.1-10 Identifies and Evaluates System Changes
๐Ÿ’ผ CC8.1-11 Identifies Changes in Infrastructure, Data, Software, and Procedures Required to Remediate Incidents
๐Ÿ’ผ CC8.1-12 Creates Baseline Configuration of IT Technology
๐Ÿ’ผ CC8.1-13 Provides for Changes Necessary in Emergency Situations
๐Ÿ’ผ CC8.1-14 Manages Patch Changes
๐Ÿ’ผ CC8.1-15 Considers System Resilience
๐Ÿ’ผ CC8.1-16 Protects Confidential Information
๐Ÿ’ผ CC8.1-17 Protects Personal Information
๐Ÿ’ผ CC8.1-18 Privacy by Design