History
- Priority
- should
- Nov 2018
- Removed
- Removed due to being covered by the intent of security control 0518.
- 2017
- All changes to a network’s configuration should be documented and approved through aformal change management process.
- 2015
- All changes to a network’s configuration should be documented and approved through aformal change management process.
- 2010
- All changes to the configuration should be documented and approved through a formal change control process.
- 2008
- All changes to the configuration should be: a. approved through a formal change control process b. documented c. comply with the network security policy and security plan.