Why detective controls are important in change management?

183937 Resource 183011 183122 183122 1190408894061 1190409353597 Controlled Are Detective Controls Sufficient in Change Management?

Going beyond detective controls for change management

Recently I came across an article <a href="http://searchwinit.techtarget.com/tip/0,289483,sid1_gci1271952,00.html">“Why detective controls are important in change management?”.</a>  This is a great article which sets the stage for talking about the importance of controls in Change Management.  I strongly agree with the author and want to extend the idea. The presence of detective controls based on a scanning approach can lead to gaps where the change was performed and then reverted before the next scan was executed. Consider the scenario where a user performs a change and quickly reverts it.  With scan-based solutions, there is no way to detect such changes and such changes can cause outages and violate various Service Level Agreements that a business owner might be accountable to.  Wouldn’t it be more effective to have detective controls detect changes in realtime and capture the five dimensions of change – who, what, where, when and why?  This reminds me of a customer quote after an outage caused by a change “Who changed what, when and my god WHY?”Extending the concept of controls, the next thing that IT staff is now looking for is “preventative controls”.  Would it not be great to prevent change from being executed if the change was not approved?by Rishi Bhargava Director, Product Management <a href="mailto:rishi@solidcore.com">rishi@solidcore.com</a> 9 application/xml false change management detective controls Why detective controls are important in change management? Read this original article by George Spafford published on TechTarget's WinIT http://searchwinit.techtarget.com/tip/0,289483,sid1_gci1271952,00.html Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) 127.0.0.1 127.0.0.1 erinswanson false true false false true 183020 false false true false false false true 183011 blog blogsite/SolidCore/web