Security starts... by reading my latest blog post over on the Tripwire blog https://www.tripwire.com/state-of-security/where-security-starts-your-security-projects!

Change management is the backbone of any IT project, especially in the realm of security. Change control requests outline proposed changes, their impact, and the steps for implementation. Equally important are backout plans, detailing how to revert to the previous state if issues arise.

I'm sure I've seen some cheats on this over the years (whilst deploying a change audit tool no less) but I still think good change control and processes are important to avoid delays on a security project of practically any scale.