Change Management

Edited

The purpose of this policy is to establish management direction and high-level objectives for the change management process. This policy guides the implementation of changes to reduce the impact on other tasks/projects as well as to mitigate associated risks such as:

  • Information being corrupted and/or destroyed

  • Adverse impact on other organizational processes

  • Computer performance being disrupted and/or degraded

  • Productivity losses being incurred

 

 

Category

Sub-Category

Name

Activity

Change Management

Change Management

Change Management Workflow

Change scope, change type, and roles and responsibilities are pre-established and control workflow; notification and approval requirements are also pre-established based on risk associated with change scope and type.

Change Management

Change Management

Change Approval

Prior to introducing changes into the production environment, approval from authorized personnel is required based on the following: • change description
• impact of change
• test results
• back-out procedures

Change Management

Segregation of
Duties

Segregation of
Duties

Changes to the production environment are implemented by authorized personnel.

 

Change Management

Change Communication

Communication of Maintenance and Downtime

Customer-impacting product and system changes are publicly communicated on the company website.