Back

Analyze the environmental impact of organizational changes.


CONTROL ID
14979
CONTROL TYPE
Process or Activity
CLASSIFICATION
Detective

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Establish, implement, and maintain an environmental management system., CC ID: 14945

This Control has the following implementation support Control(s):
  • Analyze the environmental impact of changes in developments, activities, products, and services., CC ID: 14980


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • Changes to organizational structure result in a formal (internal) review of the impact to PCI DSS scope and applicability of controls. (A3.2.3, Payment Card Industry Data Security Standard Requirements and Testing Procedures, Defined Approach Requirements, Version 4.0)
  • change, including planned or new developments, and new or modified activities, products and services; (§ 6.1.2 ¶ 2 a), ISO 14001:2015 - Environmental management systems — Requirements with guidance for use, Third Edition)
  • To facilitate planning, the organization should maintain appropriate documented information on the environmental aspects and associated environmental impacts identified, the criteria used to determine its significant environmental aspects and those determined significant, including those that can oc… (6.1.2.5 ¶ 5, ISO 14004:2016, Environmental management systems — General guidelines on implementation, Third Edition)
  • actions related to possible changes to the environmental policy, environmental objectives and other elements of the environmental management system; (9.3 ¶ 4 Bullet 5, ISO 14004:2016, Environmental management systems — General guidelines on implementation, Third Edition)