Change Management Procedure

Inside the document

1. Raise and describe the change
2. Assess risk and review
3. Approve
4. Test and prepare
5. Implement and verify
6. Emergency changes
7. Close and monitor

Plus document control, roles, exceptions, enforcement, review cycle and an auditor evidence checklist.

Sample clause · ApproveNormal changes. A change approver authorises Low and Medium risk changes. High-risk changes are presented to the CAB. No one approves a change they requested, wrote or will implement.

What an auditor will check

Every production change traces to an approved record with testing and rollback, the approver is independent, and deployments reconcile to approvals.