The college's technical configuration change control processes are governed through documented policies and procedures, ensuring that changes to the college’s IT environment are authorized, monitored, and validated to mitigate cyber risks effectively. The college will ensure that suitable mechanisms are in place to identify, analyze, and apply appropriate statutory, regulatory, and contractual controls to mitigate cyber risks and maintain compliance with relevant requirements.