Defense & Operations
Change Management
Also known as: Change control
Definition
Structured process to propose, review, approve, schedule, implement, and review changes to IT systems with controlled risk and clear traceability.
Examples
- An emergency change ticket to roll back a firewall rule that broke critical traffic.
- A standard change template auto-approving renewal of low-risk TLS certificates.
Related terms
Configuration Management
The discipline of establishing, recording, and enforcing the desired state of systems and applications so configurations remain known, consistent, and secure.
Patch Management
The end-to-end process of identifying, testing, deploying, and verifying software updates that fix vulnerabilities or bugs.
Security Controls
Safeguards or countermeasures — technical, administrative, or physical — used to prevent, detect, or respond to threats against information assets.
Asset Management
Asset Management — definition coming soon.
Incident Response
The organised process of preparing for, detecting, analysing, containing, eradicating, and recovering from cyber security incidents, then capturing lessons learned.
Security Posture
Security Posture — definition coming soon.