Changes to information processing facilities and information systems should be subject to change management procedures.
Changes to information processing facilities and information systems should be subject to change management procedures.
Test information should be appropriately selected, protected and managed.
Audit tests and other assurance activities involving assessment of operational systems should be planned and agreed between the tester and appropriate management.