Change Management o The process through which changes to the configuration of information systems are monitored and controlled, as part of the organization's overall configuration management efforts o Each individual component should have a separate document or database record that describes its initial state and subsequent changes - Configuration information - Patches installed - Backup records - Incident reports/issues o Change management ensures all changes are planned and controlled to minimize risk of a service disruption