▁After ▁implementation ▁the ▁policies ▁are ▁evaluated , ▁either ▁as ▁self - ass ess ments , ▁or ▁via ▁internal ▁or ▁external ▁aud itors . ▁ ▁In ▁the ▁maintenance ▁phase ▁the ▁e - pol ic ies ▁are ▁adjust ed ▁based ▁on ▁the ▁evaluation . ▁Ne eded ▁changes ▁are ▁processed ▁via ▁Request s ▁for ▁Change . ▁ ▁== ▁See ▁also ▁== ▁▁ ▁In frastr ucture ▁Management ▁Services ▁ ▁IT IL ▁v 3 ▁ ▁Microsoft ▁Oper ations ▁Framework ▁ ▁Information ▁security ▁management ▁system ▁ ▁CO BIT ▁ ▁Cap ability ▁M atur ity ▁Model ▁ ▁I SP L ▁ ▁See ▁also ▁▁ ▁Information ▁security ▁ ▁References ▁ ▁S ources ▁▁ ▁Bon ▁van , ▁J . ▁( 2 0 0 4 ). ▁IT - Service ▁management : ▁een ▁intro duct ie ▁op ▁basis ▁van ▁IT IL . ▁Van ▁Har en ▁Publishing ▁ ▁C az em ier , ▁Jacques ▁A .; ▁Over be ek , ▁Paul ▁L .; ▁Peters , ▁Lou k ▁M . ▁( 2 0 0 0 ). ▁Security ▁Management , ▁Station ery ▁Office . ▁ ▁Security ▁management . ▁( F ebru ary ▁ 1 , ▁ 2 0 0 5 ). ▁Microsoft ▁ ▁T se , ▁D . ▁( 2 0 0 5 ). ▁Security ▁in ▁Modern ▁Business : ▁security ▁assess ment ▁model ▁for ▁information ▁security ▁Pract ices . ▁Hong ▁Kong : ▁University ▁of ▁Hong ▁Kong . ▁ ▁External ▁links ▁▁ ▁Open ▁Security ▁Architecture ▁ ▁Microsoft ▁Oper ations ▁framework ▁home page ▁ ▁ISO / IE C ▁ 1 7 7 9 9 ▁website ▁ ▁The ▁O GC