Application dependency freeze during audit season
Overview
Auditors hate moving targets—freeze non-security changes around SOC/ISO window.
Window
Communicate 4 weeks ahead: only security tickets allowed; emergencies via CAB breach with CFO approval.
Scope
ERP, identity, reporting stacks explicitly listed.
Exceptions
Document each thaw with auditor notification if required.
Post-audit
Planned “catch-up sprint” backlog to avoid pent-up risk.
Related Articles
EDR deployment checklist for new workstations
## Overview Use this runbook when onboarding a new Windows workstation or re-imaging a device that...
Handling Defender for Business false positives
## Overview False positives waste analyst time and train users to ignore alerts. This article stand...
Application allowlisting with Windows Defender ASR rules
## Overview Attack Surface Reduction (ASR) rules reduce exploit surface by constraining Office macr...