Change Management Policy

Change Management Policy – Template 4

This objective of the Change Management Policy is to define the overall requirements for the management of changes to Company’s IT systems and applications. This Policy requires that all changes within the Company Production Computing Environments are clearly stated, controlled, measured and enforced. All change submissions must be reviewed by a Change Control Body and must be rejected if they are deemed to be out of compliance.

This Policy applies to all software and hardware changes and releases to the Company’s IT Production and Production Disaster Recovery (DR) Computing environments (referred to hereafter as the Production Computing Environment).

This Policy applies globally to all offices and production sites across each business area, (Production sites include rooms containing electronic hardware such as servers, switches, cables, etc).

It is mandatory that any external parties or vendors interacting with Company through the change process adhere to all aspects of this Policy.

CONTENT

1. OVERVIEW
1.1 PROCEDURE OWNER
1.2 CLASSIFICATION
1.3 APPLICABLE REGULATIONS
1.4 RELATED [COMPANY] NORMS AND PROCEDURES
1.5 OBJECTIVES
1.6 AUDIENCE AND SCOPE
1.7 DOCUMENT SUPPORT
2. DEFINITIONS & ABBREVIATIONS
3. CHANGE MANAGEMENT PROCESS
4. REQUESTS FOR CHANGE
5. TESTING OF CHANGES
6. APPROVALS
7. SEGREGATION OF DUTIES
8. AUDIT TRAIL
9. EMERGENCY CHANGES
10. CHANGE WINDOWS
11. CHANGE FREEZES
12. POST IMPLEMENTATION REVIEW
13. QUALITY ASSURANCE
14. EXCEPTIONS
15. FINAL CONSIDERATIONS
15.1 DISCIPLINARY ACTIONS AGAINST PROCEDURE VIOLATION
15.2 DOCUMENT REVISION

Pages: 13

 

Review Change Management Policy – Template 4.

Related Products:

€1,049.99

Purchase

This bundle contains all the products listed in the Program Development and Change Management section. Take advantage of the 25% OFF when buying the bundle!

€49.99

Purchase

This standard documents the security requirements for Wireless solutions within the Company.

€99.99

Purchase

This IT Risk Standard details the requirements with respect to Network Security. It addresses requirements which must be incorporated into the Company network design, in order to mitigate risks associated with remote access and interconnected networks.