Conducting thorough test results prior to deployment is the best way to ensure that the new update will not negatively impact the security posture of the CMS. In a controlled environment, it allows for the identification and remediation of potential security vulnerabilities. While approval process, backout plan, and restricted activities are important in a change management process, testing for security implications directly addresses the concern of maintaining the current security posture.