Change Management Policy – PCI Updates

Description

This document is designed to identify key control activities. It will identify each step of the process to implement any change to systems whether they are scheduled custom development, modifications, related routine maintenance, vendor patches, vendor upgrades and related routine maintenance or emergency requests. In addition, it includes the policy for retention of test documentation and the associated approvals. This policy references PCI, all the requirements marked as PCI only pertain to PCI assets.