Modeling and Analysis of Information Technology Change and Access Controls in the Business Context
Ongoing field work centered at the Information Technology Process Institute (ITPI) makes clear that processes that control change and
access within information technology (IT) management and operations simultaneously reduce security risk and increase efficiency and
effectiveness.
The link address is: http://www.sei.cmu.edu/pub/documents/06.reports/pdf/06tn040.pdf