https://www.cisa.gov/sites/default/files/c3vp/crr_resources_guides/CRR_Resource_Guide-RM.pdf
This guide was created to assist individuals responsible for managing risk management programs for IT operations, including executives who establish policies and priorities for risk management, managers and planners who are responsible for converting executive decisions into action plans, and operations staff who implement those operational risk management plans.
https://www.youtube.com/watch?v=PlKsAZrwcD8
This is a video from Simplilearn that covers ITIL Change Management process.
YouTube – CMMC 2.0 Control CM L2-3.4.5 – Define, document, approve, and enforce physical and logical access
3.4 3.4.3 3.4.4 3.4.5 Configuration Management
https://www.youtube.com/watch?v=a0_CLki_X5g
This video explains CMMC Control CM.L2‑3.4.5, which requires organizations to define, document, approve, and enforce physical and logical access restrictions related to changes in organizational systems.