History

Priority

must

Aug 2019

Removed

Security control 0115 was merged into security control 1211.

Jul 2019

For routine and urgent changes: § the change management process is followed § any proposed change that could impact the security of a system is approved by the system’s authorising officer § all associated security documentation is updated to reflect the change.

2015

Agencies must ensure that for routine and urgent changes:• the change management process, as defined in the relevant information securitydocumentation, is followed• the proposed change is approved by the relevant authority• any proposed change that could impact the security of a system is submitted to theaccreditation authority for approval• all associated information security documentation is updated to reflect the change.

2010

Agencies must ensure that for routine and urgent changes:• the change management process, as defined in the relevant information security documentation, is followed• the proposed change is approved by the relevant authority• any proposed change that could impact the security of a system is submitted to the accreditationauthority for approval• all associated information security documentation is updated to reflect the change.