CC8 Change management

Common criteria series CC8: how changes to infrastructure, data, software and procedures are authorized, built, tested, approved and deployed.

CC8.1 Change management

The only change management criterion in SOC 2: the full life of a change to infrastructure, data, software or procedures, from authorization through design, testing and approval to deployment, including emergency changes, patches and baseline configurations.

Talk to our team.

Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.

  • 30-minute call: free, with no obligation.
  • NDA on request: we can sign before you share details.
  • Clear next steps: a scope and plan after the call.
Book a callhello@deployopen.com