Change Policy Enforcement

Critical IT systems such as financial systems and systems running mission-critical IT services are usually governed by complex policies that define the proper procedure for making a change. These policies may include the proper procedure for approving changes, the correct approval authorities for different types of changes, what time window approved changes are to be implemented, who/what applications are allowed to implement changes, etc.

S3 Control turns policy into reality by technically enforcing change policies on enforcement-enabled servers. When a change attempt is made, it is first examined to see if it conforms to the defined policy, and then implemented on the system. If any out-of-policy change is attempted, it is blocked and a record is made of the change attempt. If blocking is not desirable, the system can also be configured to allow the change but send out an out-of-policy alert in real-time, as well as provide detailed reporting on out-of-policy changes.

S3 Control's Change Policy Enforcement helps ensure that critical systems cannot be tampered with - either on purpose or inadvertently. This ensures that systems keep running the way they are intended to, and there are no surprises.

For more information on how S3 Control can help you and your organization get control over unauthorized changes, please read our Change Policy Enforcement Datasheet.