U.S. Department of Health and Human Services
Once operational, systems are typically in a constant state of modification and enhancement, such as upgrades to components. Any change can have a significant impact on the security posture of the system. Therefore, continually documenting system changes and assessing the potential impact on the security is an essential aspect of maintaining system accreditation.
Adherence to your OPDIV’s configuration and change management procedures is necessary to maintain an accurate inventory of all changes to the system.
Page 9 of 12
Operations and Maintenance Phase