CCN - Business Continuity and Change
Continuous protection through business changes is vital
Domain Description
Domain focused on organizational resilience, operational continuity and controlled change management in the business environment. It covers change management and control procedures, quality and security testing before deployments, and the ability to revert changes when they fail (rollback). It promotes the identification of single points of failure, the use of the shared responsibility model with cloud providers (CSPs) and the implementation of deployment strategies such as blue/green. Its purpose is to ensure that technology changes don't compromise service availability or the customer experience.
CCN Controls
Organizational resilience, operational continuity and controlled change management in the business environment.
CCN-1
CCN-2
CCN-3
Common problems in companies
It's unclear what to do when there's an outage.
Trying to reinvent the wheel for everything, without sizing what ongoing support, maintenance and updates involve.
Changes are made and constantly affect customers.
ROI (Return on Investment)
For companies
Identify single points of failure.
Optimize costs with temporary test environments.
Let your team find the errors, not your customers.
For cybersecurity professionals
Implement a blue/green deployment strategy.
Create temporary deployment environments.
Propose and implement changes aligned with business strategies.