Back

Establish, implement, and maintain a product and service release log.


CONTROL ID
13705
CONTROL TYPE
Establish/Maintain Documentation
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Initiate the System Development Life Cycle implementation phase., CC ID: 06268

This Control has the following implementation support Control(s):
  • Include the name of the person authorizing the release of products and services in the product and service release log., CC ID: 13707


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • There needs to be a documented Migration Policy indicating the requirement of roadmap / migration plan / methodology for data migration (which includes verification of completeness, consistency and integrity of the migration activity and pre and post migration activities along with responsibilities … (Critical components of information security 12) (i), Guidelines on Information Security, Electronic Banking, Technology Risk Management and Cyber Frauds)
  • The organization shall define the types of release, including emergency release, their frequency and how they are to be managed. (§ 8.5.3 ¶ 1, ISO/IEC 20000-1:2018, Information technology — Service management —Part 1: Service management system requirements, Third Edition)
  • Records of service requests shall be updated with actions taken. (§ 8.6.2 ¶ 2, ISO/IEC 20000-1:2018, Information technology — Service management —Part 1: Service management system requirements, Third Edition)