← SOC 2 Trust Services Criteria in plain English

CC8.1 CC8

Change Management / CC8.1

Authorizing, testing and approving changes before they ship

Think of it likeGetting the rewiring inspected before you plaster over it.

In plain English

Changes to infrastructure, data, software and procedures are authorized, designed, tested, approved and implemented under a controlled process, with emergency changes still reviewed after the fact.

Related CSF, CIS and ISO controls (unofficial mapping)

ID.IM-03ID.RA-07PR.PS-01PR.PS-0616.116.1016.1116.1216.1316.14A.8.19A.8.25A.8.26A.8.27A.8.28A.8.29