Define Security Maintenance Procedures › Verifying Change Requests

Verifying Change Requests

If the organization is small, and the security administration staff can easily identify and control all users and resources, then the central administrators might be able to verify the requests for changes.

If the organization is large, it is difficult for the central staff to know all users and resources. They have to depend on other individuals to verify change requests. In large organizations, or even in small ones, it is recommended that the representatives of the functional area which owns the resource(s) be responsible for verifying the necessity and accuracy of change requests. The request must be made in writing with the proper authorization.