Home > Glossary > CompTIA Security+ Certification Exam > Change Management

📖 What is Change Management?

Change Management is a structured process used to ensure that changes to an IT environment are implemented in a controlled and coordinated manner. It minimizes the risk of outages or security vulnerabilities introduced by unplanned updates.

🥋 Sensei Says:

"The exam often tests the 'Change Advisory Board (CAB)' as the governing body responsible for approving these changes."

📚 Certification: CompTIA Security+ Certification Exam (SY0-701)

🔑 What are the Key Concepts of Change Management?

▸ The Change Advisory Board (CAB) is the governing body that reviews, evaluates, and approves or rejects proposed changes to minimize operational risk.
▸ A formal Change Request (CR) documents the purpose, scope, risk assessment, and impact of the proposed modification to ensure full visibility.
▸ Backout or rollback plans are essential requirements that provide a documented method to revert systems to their original state if a change fails.
▸ Emergency changes follow an expedited approval process for critical security patches or outages, though they still require retrospective documentation and review.
▸ Standard changes are low-risk, routine tasks that are pre-approved by the CAB, allowing them to be implemented without a new request each time.

🎯 How does Change Management appear on the SY0-701 Exam?

A scenario might describe a security administrator wanting to update a core switch's firmware during business hours; you will likely need to identify the Change Advisory Board (CAB) as the entity responsible for reviewing and approving the request.

You may be asked to identify the most critical component of a change plan when a company is implementing a high-risk firewall rule change, specifically focusing on the need for a documented rollback plan to ensure availability.

Expect questions where you must choose between a standard or emergency change process based on whether the situation involves a routine, pre-approved update or a critical zero-day vulnerability requiring immediate remediation.

❓ Frequently Asked Questions

What is the difference between a standard change and an emergency change?

Standard changes are low-risk, routine tasks that are pre-approved by the CAB. Emergency changes are urgent fixes for critical issues that use an expedited approval process to minimize downtime or security risks while still maintaining a record.

Why is a rollback plan considered a security requirement?

A rollback plan ensures business continuity and availability, which are key pillars of the CIA triad. If a change introduces a vulnerability or causes a crash, the organization can quickly revert to a known-good state.

Related Terms from CompTIA Security+ Certification Exam

Zero Trust Privileged Access Management (PAM) Hardware Security Module (HSM) Key Escrow Zero-Day Exploit Security Operations Center (SOC)

📝 Related Study Guides

Study Guide 9 min read

How to Pass CompTIA Security+ (SY0-701) on Your First Try

To pass CompTIA Security+ SY0-701 on your first try, build a structured 6-8 week study plan covering all five domains, prioritize understanding concepts over memorization, practice with scenario-based questions daily, and consistently score 85% or higher on practice exams before scheduling your test. Hands-on lab experience is essential for performance-based questions.

Deep Dive 8 min read

Zero Trust Architecture: Security+ (SY0-701) Deep Dive

Zero Trust architecture is a security framework based on the principle "never trust, always verify." Unlike traditional perimeter security, it assumes breaches are inevitable and requires strict identity verification for every person and device attempting to access resources, regardless of whether they are inside or outside the network perimeter.

Exam Tips 8 min read

Security+ PBQs: Master Firewall ACLs & Incident Response

Security+ Performance-Based Questions (PBQs) are scenario-driven simulations requiring you to apply knowledge to real-world tasks. To master them, focus on firewall ACL rule ordering, the "implicit deny" principle, and analyzing system logs for incident response. Consistent practice with high-fidelity simulations is the most effective way to ensure exam success.