Requirement
"Changes to information processing facilities and information systems shall be subject to change management procedures."[1]
Explanation
You must track review and approve configuration changes before committing them to your production systems. Configuration changes can create unintended and unforeseen issues that can affect the security and availability of your systems. You need to establish a change control board to review proposed changes. They should discuss potential impacts before deploying the changes.
