Glossary: Security Controls and Change Management

Unauthorized change

Also written: unapproved change, unauthorized changes

Any change made without approval, or outside its approved scope or window, even if the content was approved. Examples are the unexplained firewall rule and the contractor's "support2" admin account; both should be treated as possible attacks.