Change Control

An internal control procedure by which only authorised amendments are made to the organisation's software, hardware, network access privileges, or business process etc. This method usually involves the need to perform an analysis of the problem and for the results to be appended to a formal request prepared and signed by the senior representative of the area concerned. This proposal should be reviewed by management (or committee) prior to being authorised. Implementation should be monitored to ensure security requirements are not breached or diluted.