Change Management Document
I noticed that the ISO 27001 package contains the Change Management Policy document (A12.2), but not a document to provide guidance on, managing, tracking, and documenting the change-steps.
Is there an industry standard “Change Management” document to manage, track, and document infrastructure or application changes?
Thank you for your assistance.
Assign topic to the user
ISO 27001 FOUNDATIONS COURSE
Everything you need to know about ISO 27001.
Enroll for free 
ISO 27001 FOUNDATIONS COURSE
Everything you need to know about ISO 27001.
Enroll for free
ISO 27001 FOUNDATIONS COURSE
Everything you need to know about ISO 27001.
Enroll for free
For more detailed documentation for change management, I suggest you take a look at the templates in this toolkit that are compliant with ISO 20000 (the ISO standard for the management of IT services): https://advisera.com/20000academy/itsm-change-management-toolkit/
- Change Management Process
- Request for Change and Change Record
- Minutes of Meeting CAB
- Change Schedule
They can be used in an ISMS, but they are not mandatory for ISO 27001 compliance.
Comment as guest or Sign in
Apr 06, 2023