| 💼 CC8.1 The entity authorizes, designs, develops or acquires, configures, documents, tests, approves, and implements changes to infrastructure, data, software, and procedures to meet its objectives. | 18 | | | |
| 💼 CC8.1-1 Manages Changes Throughout the System Lifecycle | | | 3 | |
| 💼 CC8.1-2 Authorizes Changes | | | 3 | |
| 💼 CC8.1-3 Designs and Develops Changes | | | 3 | |
| 💼 CC8.1-4 Documents Changes | | | 3 | |
| 💼 CC8.1-5 Tracks System Changes | | | 3 | |
| 💼 CC8.1-6 Configures Software | | | 3 | |
| 💼 CC8.1-7 Tests System Changes | | | 3 | |
| 💼 CC8.1-8 Approves System Changes | | | 3 | |
| 💼 CC8.1-9 Deploys System Changes | | | 3 | |
| 💼 CC8.1-10 Identifies and Evaluates System Changes | | | 3 | |
| 💼 CC8.1-11 Identifies Changes in Infrastructure, Data, Software, and Procedures Required to Remediate Incidents | | | 3 | |
| 💼 CC8.1-12 Creates Baseline Configuration of IT Technology | | | 3 | |
| 💼 CC8.1-13 Provides for Changes Necessary in Emergency Situations | | | 3 | |
| 💼 CC8.1-14 Manages Patch Changes | | | 3 | |
| 💼 CC8.1-15 Considers System Resilience | | | 3 | |
| 💼 CC8.1-16 Protects Confidential Information | | | | |
| 💼 CC8.1-17 Protects Personal Information | | | | |
| 💼 CC8.1-18 Privacy by Design | | | | |