JavaScript must be enabled in order to use this site.Please enable JavaScript in your browser and refresh the page. Section 12 - Information Systems Acquisition, Development and Maintenance 12.4.1 Control of Operational Software 12.4.3 Access Control to Program Source Code 12.5.1 Change Control Procedures 12.5.2 Technical Review of Applications After Operating System Changes 12.5.3 Restrictions on Changes to Software Packages 12.6.1 Control of Technical Vulnerabilities Copyright © Cloud Software Group, Inc. All rights reserved.