Change Records #

Control Code: KCC1

TLDR: All systems and services maintain a record of changes

Rationale: To meet our change management requirements, all changes to production systems are recorded permanently

Background #

The deployment steps in our pipelines automatically log all deployments, and we can also control that we only deploy software that is approved in the Kosli audit trail.

How we implement this control #

• We monitor production systems and automatically record a forensic history of all changes in Kosli using environment monitoring
  • Environment records can be found here: https://app.kosli.com/kosli/environments/