Question CHNG-01
Does your Change Management process minimally include authorization, impact analysis, testing, and validation before moving changes to production?
Weight | 20 |
High Risk | No |
Required | Yes |
Compliant Answer | Yes |
Standard Guidance
EDUCAUSE provides no guidance here
Answering "NO"
State your plans to implement Change Management in your environment or clarify what your change management processes do include.
Answering "YES"
Indicate all procedures that are implemented in your CMP. (a) An impact analysis of the upgrade is performed. (b) The change is appropriately authorized. (c) Changes are made first in a test environment. (d) The ability to implement the upgrades/changes in the production environment is limited to appropriate IT personnel.
Reason for Question
This question outlines a mature Change Management process. Changes should be analyzed for impact, officially approved, tested, and performed by authorized users.
Follow-Up Inquiries
If the vendor's response does not cover the details outlined in the reasoning, follow-up and get specific responses, as needed.
HECVAT Pro Advice
[Add expert insights and best practices]
Implementation Tips
[Add practical steps for SME SaaS vendors]
FAQ
[Add common questions related to this HECVAT item]
Resources
[Add links to relevant articles or tools]