Standard:
YALE-MSS-5.5: Manage all changes to the system through a change control process
YALE-MSS-5.5.2: An audit trail for changes to the IT system is maintained to account for when changes were made and by whom
Low Risk Endpoint
Not Required
Moderate Risk Endpoint
Not Required
High Risk Endpoint
Not Required
Low Risk Server
Not Required
Moderate Risk Server
Not Required
High Risk Server
Required
Low Risk Mobile Device
Not Required
Moderate Risk Mobile Device
Not Required
High Risk Mobile Device
Not Required
Low Risk Network Printer
Not Required
Moderate Risk Network Printer
Not Required
High Risk Network Printer
Not Required
Details
IT Systems owned or managed by Yale Information Technology Services (ITS, or "Central IT") must go through the Change Advisory Board (CAB). See Policy 1615 and Procedure 1615 PR.01 for more details.