A significant change is a change that is likely to affect the security state of an information system.