Documentation
HECVAT Full v3.0.6
Change Management
CHNG-01

Question CHNG-01

Does your Change Management process minimally include authorization, impact analysis, testing, and validation before moving changes to production?

Weight20
High RiskNo
RequiredYes
Compliant AnswerYes

Standard Guidance

EDUCAUSE provides no guidance here

Answering "NO"

State your plans to implement Change Management in your environment or clarify what your change management processes do include.

Answering "YES"

Indicate all procedures that are implemented in your CMP. (a) An impact analysis of the upgrade is performed. (b) The change is appropriately authorized. (c) Changes are made first in a test environment. (d) The ability to implement the upgrades/changes in the production environment is limited to appropriate IT personnel.

Reason for Question

This question outlines a mature Change Management process. Changes should be analyzed for impact, officially approved, tested, and performed by authorized users.

Follow-Up Inquiries

If the vendor's response does not cover the details outlined in the reasoning, follow-up and get specific responses, as needed.

HECVAT Pro Advice

[Add expert insights and best practices]

Implementation Tips

[Add practical steps for SME SaaS vendors]

FAQ

[Add common questions related to this HECVAT item]

Resources

[Add links to relevant articles or tools]