Change management
Change management is a formal process that
-
enforces an official approval process before configuration changes can be made to a device,
-
requires administrators to open tickets before they can make configuration changes, and
-
ensures that the right employees make the final decisions through submission and approval of tickets.
Change management characteristics
When using change management, the system implements these controls:
-
Administrators can see their own changes within a ticket, but they cannot see changes anyone else has made within a ticket
-
A policy is locked once a user makes a change within a ticket, preventing interfering changes
-
Users cannot make changes while another user has made a change that is pending approval
Administrators can create multiple tickets so that a single ticket contains only logically-related policy changes. Tickets with a more limited scope are also easier to evaluate and approve quickly.