Windows Server 2003 Security: A Technical Reference

Maintenance Strategies for Change Management

Change management is the process that formalizes and appropriately organizes the response to necessary changes. Patch management is one form of change control, albeit a potentially more volatile one. Change management, however, encompasses all potential changes, even those that are not security-related. It includes system upgrades, release changes to existing software packages, and new programs, hardware, and systems. Another part of change management, security configuration maintenance, must be a part of change control as well. Security configuration maintenance is the process of keeping security configuration and practices in place. Over time, security practices may be modified due to performance, ...