Lack of Change Management & Backsliding on Security Controls

We spend weeks or months designing, planning and implementing security controls. Send emails to the IT team to ensure they are aware, and most times they themselves are implementing them. Some time later an admin comes through during task/project involving the same systems and disables the control. In few cases there's an SOP which is ignored. Security finds out about it later, reports to leadership and it goes back in the queue to remediate again. Immensely frustrating when it involves …

admin aware cases change change management control controls cybersecurity emails management planning project security security controls send systems task team