SID-OPS-05 — Change Management
| Property | Value |
|---|---|
| Status | to_do |
| Owner | platform |
| Category | process |
| CSF Function | govern |
| Group | Operational Controls |
Description
Formal change management process with materiality assessment. Changes to wallet service classified by impact and risk. Notification to certification body for material changes. Staged deployment process with rollback procedures.
Operator Responsibility
Implement change management for deployment-specific configuration, infrastructure changes, and notification to certification body.
Audit Findings
| Finding | Severity | Status |
|---|---|---|
| EN-S-3 — Partial SDLC, change management and vulnerability scanning | medium | in progress |