Q: Are cloud service providers allowed to change parameter definitions at any time?
A: No. Changes to the CSP must follow your significant change process. This includes notification requirements, impact analysis, and time for agencies to ask questions. A change to a control parameter would may require third party validation as well.
