SOC 2 · CC8
CC8 · Change Management
3 controls in this family.
SOC2-CC8-CHANGE-MGMT
Change Management Process
Formal process for requesting, approving, testing, and documenting changes to production infrastructure and systems.
SOC2-CC8-CODE-REVIEW
Code Review and Approval Process
Peer code review requirement for all changes to production application code before merging.
SOC2-CC8-RELEASE-MGMT
Deployment and Release Management
Controlled deployment pipeline with automated testing gates to prevent untested or unauthorized code from reaching production.
Change Management Process
Formal process for requesting, approving, testing, and documenting changes to production infrastructure and systems.
Testing: Continuous
Code Review and Approval Process
Peer code review requirement for all changes to production application code before merging.
Testing: Continuous
Deployment and Release Management
Controlled deployment pipeline with automated testing gates to prevent untested or unauthorized code from reaching production.
Testing: Continuous