Definition
Change control is a systematic process for managing and approving all modifications to an IT system or project. It ensures that changes are documented, assessed for risk, and implemented in a controlled manner to minimize disruption. This structured approach helps maintain system stability, security, and compliance by preventing unauthorized or poorly planned alterations. For instance, before deploying a new software version, a change control board reviews the plan, assesses potential impacts, and grants approval. Unlike ad hoc adjustments, change control follows a defined workflow with specific roles and responsibilities. This concept is frequently assessed in cybersecurity certifications like Security+ and CySA+ as well as project management exams like CAPM.