What Did the Change Review Find?

About this interactive

In the evaluation phase, the plan is checked against everything thought through in planning. The lesson names three things to check. Procedure: are the written steps correct? Right order, nothing missing, the right systems named, steps that would actually work. Policy: does the change meet the organization's policies, above all its security policies? A plan can be perfectly written and still do something the rules ban. Communication: is everyone who needs to know being told, at the proper time? The lesson's point about who evaluates: if you check a plan you wrote, you will overlook things. A change advisory board, a team of other people, evaluates the plan across all of these and gives the final approval or rejection. Once it is approved, implementation is just following the written steps and checking them off. A quick test for each card: are the steps themselves wrong, does the change break a rule, or is someone not told, or told too late?

What you'll learn

Classify a problem found when a change plan is evaluated: an error in its procedure, a clash with security policy, or a gap in its communication
Explain why a change advisory board, not the plan's own author, evaluates the plan and gives the final approval

Aligned to

CompTIA Security+

1.3 Explain the importance of change management processes and the impact to security.

NIST 800-53

CM-3 Configuration Change Control

ISC2 CISSP

7.9 Understand and participate in change management processes

Key terms

Change Advisory Board: A group that reviews and evaluates proposed changes to ensure they are appropriate for the environment and comply with organizational policies and procedures.
Security Policy: A formal document that defines an organization's security goals, rules, and responsibilities.
Change Management: A structured process for requesting, reviewing, approving, and documenting changes to IT systems or organizational procedures. Change management reduces security risk by ensuring modifications are tested and authorized before deployment.

Topics

Change Management Change Advisory Board Interactive Categorize

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →