Your coworker identified a vulnerability for a 3rd party software solution hosted on premise. The coworker is out sick today and has asked you remediate this issue as quickly as possible. You have identified a patch to fix the security vulnerability from the vendor's official website. What step should you take NEXT?
Start the incident response process
Install the patch immediately and inform affected users
Begin monitoring for related incidients
Submit a change request based on the companies change management processes
Correct Incorrect Unanswered
Answer Description
Changes, even urgent ones, should be documented and approved based on company policy. This is typically called something like a "Change Request" or CR, or a "Request For Change" or RFC. This is the first step in deploying updates, configuration changes, etc.
Wikipedia
Change management (CM) is a collective term for all approaches to prepare, support, and help individuals, teams, and organizations in making organizational change. It includes methods that redirect or redefine the use of resources, business process, budget allocations, or other modes of operation that significantly change a company or organization.
Organizational change management (OCM) considers the full organization and what needs to change, while change management may be used solely to refer to how people and teams are affected by such organizational transition. It deals with many different disciplines, from behavioral and social sciences to information technology and business solutions.
As change management becomes more necessary in the business cycle of organizations, it is beginning to be taught as its own academic discipline at universities. There are a growing number of universities with research units dedicated to the study of organizational change. One common type of organizational change may be aimed at reducing outgoing costs while maintaining financial performance, in an attempt to secure future profit margins.
In a project-management context, the term "change management" may be used as an alternative to change control processes wherein formal or informal changes to a project are formally introduced and approved.Drivers of change may include the ongoing evolution of technology, internal reviews of processes, crisis response, customer demand changes, competitive pressure, modifications in legislation, acquisitions and mergers, and organizational restructuring.
Change_management - Wikipedia, the free encyclopedia 