CISA: Certified Information Systems Auditor

Configuration and release management requires documented changes and recorded approvals to provide an audit trail and demonstrate that changes were authorized and controlled. Without that documentation, unauthorized or inadequately reviewed changes may be implemented without accountability.