Review system change against an approved baseline
Managed integrity monitoring is an MMC operating-service enquiry for selected Fortra integrity controls. Its purpose is to help distinguish approved maintenance from changes requiring investigation. A technical difference is not enough by itself; the reviewer needs the baseline, change context and an owner who understands the affected system.
Define assets, monitored attributes, collection and the maintenance records available for comparison. Confirm the current product configuration and manufacturer entitlements. Establish which activities MMC would perform and which remain with the customer’s change, application or security teams.
Accept change review, not just event collection
Use a known approved change and an unexplained test difference to validate the review workflow. The service should retain why an item was closed, escalated or accepted as an exception. Baseline updates require authority; automatically accepting every new state can conceal the change the system was intended to reveal.
Handover into managed operation should include the asset schedule, baseline ownership, evidence access, reporting and source-health review. For UAE maintenance involving other suppliers, ensure their approved work records reach the reviewer. MMC can scope defined review and tuning tasks, while remediation, incident response and service coverage periods need explicit agreement.
Evidence to request for this scope
- Validate monitored attributes and collection against representative source systems.
- Rehearse review of approved and unexplained changes with a retained decision record.
- Define baseline approval, maintenance correlation, coverage hours and escalation ownership.