ISC2 CISSP Certified Information Systems Security Professional Official Study Guide

by Mike Chapple

its primary purpose is to make all changes subject to detailed documentation and auditing and thus able to be reviewed and scrutinized by management.