CertiGuide to Security+  9  Chapter 5:  Operational/Organizational Security (Domain 5.0; 15%)       9  5.9  Documentation

5.9.2  Systems Architecture 1 5.9.4  Logs and Inventories

Change documentation is a decision memorandum specifying the changes and justification with the accompanying IT spreadsheet reflecting the changes. The memorandum will also state that the changes to the program are approved and should be reflected in a control log.

A quick sidebar for the real-world.. Documentation is a science. Scott W. Ambler, called Agile Documentation, found in the footnote, created the most successful model I have seen⁴⁶⁸. An example: “The basic trade-off is the "security" of having the document against your trust in its accuracy.  What would you rather have, 2000-page system document that is likely to have a significant number of errors in it but significant details or a 20-page, high-level overview?”

This type of documentation presents an audit trail of management approval of system changes before they were made.

5.9.2  Systems Architecture 1 5.9.4  Logs and Inventories