AI06 Manage changes

focuses on

controlling impact assessment, authorisation and implementation of all changes to the IT infrastructure, applications and technical solutions

halting implementation of unauthorised changes

minimising errors due to incomplete request specifications

is controlled by

AI06.1 Change Standards and Procedures Set up formal change management procedures to handle in a standardised manner all requests (including maintenance and patches) for changes to applications, procedures, processes, system and service parameters, and the underlying platforms.

AI06.2 Impact Assessment, Prioritisation and Authorisation Assess all requests for change in a structured way to determine the impact on the operational system and its functionality. Ensure that changes are categorised, prioritised and authorised.

AI06.3 Emergency Changes Establish a process for defining, raising, testing, documenting, assessing and authorising emergency changes that do not follow the established change process.

AI06.4 Change Status Tracking and Reporting Establish a tracking and reporting system to document rejected changes, communicate the status of approved and in-process changes, and complete changes. Make certain that approved changes are implemented as planned.

AI06.5 Change Closure and Documentation Whenever changes are implemented, update the associated system and user documentation and procedures accordingly.

is part of

Acquire and Implement (AI) To realise the IT strategy, IT solutions need to be identified, developed or acquired, as well as implemented and integrated into the business process.

In addition, changes in and maintenance of existing systems are covered by this domain to make sure the solutions ...

refers to

[09.2] Change management Objective: To ensure all changes are assessed, approved, implemented and reviewed in a controlled manner.

can be mapped to

Change Management process the Process responsible for controlling the Lifecycle of all Changes

supports

Define how business functional and control requirements are translated in effective and efficient automated solutions.

Ensure minimum business impact in the event of an IT service disruption or change

Maintain the integrity of information and processing infrastructure

Reduce solution and service delivery defects and rework.

Respond to business requirements in alignment with the business strategy