Change Management is blind. It is a key IT Service Management process and, undeniably, it's beneficial to plan and schedule changes. But Change Management’s ‘dirty little secret’ is that, despite the comfort blanket of documentation and approvals, you never know what’s really going on.
You have no idea what was actually changed, either during the Change Window or at any other time.
Why does that matter? First, you don’t know if the changes you wanted were correctly implemented, despite all that planning. And from a security standpoint, you have no way of distinguishing between legitimate IT activity and a stealthy cyber-attack. This is why, according to the 2018 Verizon Data Breach Investigation Report, 68 percent of breaches took months to discover.
Read the full article written by NNT CTO Mark Kedgley on SCMagazineUK