View source for AI2.5:

'''AI 2.6 Major Upgrades to Existing Systems'''<br>
<br>
'''Control Objective:'''<br>
<br>
Follow a similar development process as for the development of new systems in the event of major changes to existing systems that result in significant change in current designs and/or functionality. Issues to consider include impact analysis, cost/benefit justification and requirements management.<br> 
<br>
'''Applicability:'''<br>
<br>
:: '''Sarbanes-Oxley'''
:: HIPAA
:: GLBA
:: PCI
:: FISMA
:: NIST SP 800-66
:: Ditscap
:: Control Exception
:: User Defined
<br>
'''Risk Association Control Activities:'''<br>
<br>
::'''1.	Risk: The impact of application system changes (e.g., hardware and software) should be evaluated and adjusted to ensure ongoing availability, performance and resilience requirements.'''<br>
:::a.	SOX.6.1.1: The impact of application system changes (e.g., hardware and software) should be evaluated and adjusted to ensure ongoing availability performance and resilience requirements.<br>
<br>
'''Implementation Guide:'''<br>
<br>
'''Process Narrative'''<br>
Insert a description of the process narration that is applicable to the existing control statement this narrative refers to.<br>
<br>
'''Process Illustration'''<br>
Insert a process diagram, flowchart or other visual representation here to illustrate the process narrative.<br>
<br>
[[Image:Someimage.jpg]]<br>
<br> 
'''Control Commentary'''<br>
Insert a description of the control that is applicable to the existing control statement this commentary refers to.<br>
<br>
'''Control Exception Commentary'''<br>
Insert a description of the control exception that is applicable to the existing control statement this commentary refers to.<br>
<br>
'''Evidence Archive Location'''<br>
Insert Evidence Description Here.<br> 
<br>
'''Control Status and Auditors Commentary'''<br>
Describe the condition of the applicable control and its effectiveness. Set the color icon to a redlock.jpg, yellowlock.jpg or greenlock.jpg.<br>
<br>
[[Image:redlock.jpg]]<br>
<br>
'''Remediation Plan'''<br>
Insert remediation plan, applicability, or any information that indicates what needs to be done.<br>
<br>
'''Supplemental Information:'''<br>

<br>
'''Implementation guidance'''<br>
Insert guidance in this section if it helps to elaborate upon the subject matter. Examples of evidence that would help guide the end user is desirable.<br>