Skip to content

Change Management

A secure cloud service provider will ensure that all changes are properly documented and configuration baselines are updated accordingly.

Logging Changes

KSI-CMT-LMC

Former ID: KSI-CMT-01

Changelog:

  • 2026-02-04: Removed italics and changed the ID as part of new standardization in v0.9.0-beta; no material changes.

Log and monitor modifications to the cloud service offering.

Related SP 800-53 Controls: AU-2, CM-3, CM-3.2, CM-4.2, CM-6, CM-8.3, MA-2

Terms: Cloud Service Offering

Redeploying vs Modifying

KSI-CMT-RMV

Former ID: KSI-CMT-02

Changelog:

  • 2026-02-04: Removed italics and changed the ID as part of new standardization in v0.9.0-beta; no material changes.

Execute changes to machine-based information resources through redeployment of version controlled immutable resources rather than direct modification wherever reasonable.

Related SP 800-53 Controls: CM-2, CM-3, CM-5, CM-6, CM-7, CM-8.1, SI-3

Terms: Information Resource, Machine-Based (information resources)

Reviewing Change Procedures

KSI-CMT-RVP

Former ID: KSI-CMT-04

Changelog:

  • 2026-02-04: Removed italics and changed the ID as part of new standardization in v0.9.0-beta; no material changes.

Persistently review the effectiveness of documented change management procedures.

Related SP 800-53 Controls: CM-3, CM-3.2, CM-3.4, CM-5, CM-7.1, CM-9

Terms: Persistently

Validating Throughout Deployment

KSI-CMT-VTD

Former ID: KSI-CMT-03

Changelog:

  • 2026-02-04: Removed italics and changed the ID as part of new standardization in v0.9.0-beta; no material changes.

Automate persistent testing and validation of changes throughout deployment.

Related SP 800-53 Controls: CM-3, CM-3.2, CM-4.2, SI-2

Terms: Persistent Validation, Persistently