ISO/IEC 27017:2026
Technological controls, cloud service specific guidance – ISO/IEC 27017:2026

ISO/IEC 27017:2026 8.32: Change management

What does 8.32 require?

Carried first-edition guidance. The CSC's change management considers the effect of CSP changes. The CSP tells CSCs about changes that could harm the service, giving the category of change, planned date and time, a technical description of the change to the service and underlying systems, and notice when it starts and finishes, and may need to pass on changes caused by a peer CSP it relies on; the notification contents can be fixed in the service agreement or SLA.

Maintained by Gerard Blokdyk

Other controls in Technological controls, cloud service specific guidance – ISO/IEC 27017:2026

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.