An emergency firewall change stops an active attack on a courts case-management VPN. What must still happen afterward, and what should normal changes require?

Change management allows emergency changes under expedited paths but still requires documentation and post-implementation review. Normal changes require appropriate approval and testing to reduce outages and security gaps. Undocumented permanent freelancing in production conflicts with secure operations practice.