SSCP Systems Security Certified Practitioner All-in-One Exam Guide

Understanding Change Management

Many organizations have a change control process in place. The primary purpose is to ensure that changes don’t result in unintended outages. Networks are complex and many of the systems within a network interact with each other. Making a change in one system can easily affect other systems and result in an unintended outage. However, if these changes are examined closely before the change, many of the unintended outages can be prevented.

For example, imagine that a server hosts an application that requires port 4567 to be opened on the server. An administrator may perform a vulnerability assessment and notice that the port is open but not be aware that it’s needed for the server application. Instead, the administrator ...