Network Security, Firewalls, and VPNs, 3rd Edition

Change Management

Change management is a process that manages changes to systems or network configurations. Unmanaged and unauthorized changes can affect security operations or controls, open security holes, and result in outages. Even if a system is secured, it is possible for system administrators to make modifications; however, a change management process provides the format and necessary consideration to how a change may affect other systems.

You should implement a formal process to change network configuration settings. This includes adhering to a written policy that defines all roles, responsibilities, and procedures related to change management. The objective is to maximize the benefits for all people involved in the change and minimize ...