- Standard: pre-approved, low risk.
- Normal: requires assessment and approval.
- Emergency: expedited with post-change review.
- Changes must have a rollback plan.
- Security impact assessed for any policy or identity change.
- Maintenance windows applied to production changes.
Cloud changes use a lightweight CAB for speed with control. Approval is delegated to the Service Manager for standardized changes.
flowchart LR
A[Change Request] --> B[Assess Risk]
B --> C{Change Type}
C -->|Standard| D[Auto-Approve]
C -->|Normal| E[Approve]
C -->|Emergency| F[Expedite]
D --> G[Implement]
E --> G
F --> G
G --> H[Verify]
H --> I[Close]
See the change management diagram: 22-diagrams/change-management.mmd
- Change request:
21-templates/template-change-request.md
- Exception handling:
13-exception-handling.md - Runbooks:
20-runbooks/README.md