HOT
Thursday, May 22 2025
Lorem ipsum dolor sit amet, consectetur adipiscing elit.
Written by January 21, 2024

Change Management and Control Policy

IT Policy Article

EDC Inc Change Management and Control Policy

This policy outlines the procedures and guidelines for managing and controlling changes within EDC Inc. It is designed to ensure that all changes are managed in a controlled and systematic manner, reducing the risk of unintended impacts on the business and its operations.

Scope

This policy applies to all changes that affect the IT infrastructure of EDC Inc, including but not limited to hardware, software, network equipment, and environmental equipment. It also applies to all EDC Inc employees, contractors, and third-party service providers involved in proposing, evaluating, approving, implementing, and reviewing changes.

Policy Statement

Read moreData Protection and Privacy Policy

EDC Inc is committed to managing changes in a controlled and systematic manner. This includes the use of formal change management procedures, the use of the CMDB inventory management tool, and the involvement of the Change Audit Board (CAB) in the change management process.

Change Management Procedures

All changes must follow the change management procedures outlined below:

  • Change Proposal: All changes must be proposed by an authorized individual, such as an IT Director or Manager. The proposal must include a detailed description of the change, the reason for the change, the potential impact of the change, and a plan for implementing the change.
  • Change Evaluation: The proposed change will be evaluated by the relevant department, such as IT Server Operations or IT Security Operations. This evaluation will consider the potential impact of the change on the business and its operations, as well as the feasibility of the proposed implementation plan.
  • Change Approval: If the proposed change is deemed acceptable, it will be submitted to the CAB for approval. The CAB will consider the proposed change in the context of the overall business strategy and objectives, and will make a decision based on the best interests of the business.
  • Change Implementation: If the proposed change is approved by the CAB, it will be implemented according to the proposed implementation plan. The implementation will be overseen by the relevant department, such as IT Server Build Operations or IT Database Operations.
  • Change Review: After the change has been implemented, it will be reviewed by the relevant department and the CAB to ensure that it has been implemented correctly and is delivering the expected benefits.

Change Control

Read moreNetwork Security Policy

All changes must be controlled to ensure that they do not have an unintended impact on the business and its operations. This includes the use of the CMDB inventory management tool to track all changes, and the use of Active Directory to manage user and service accounts.

All servers must be patched every 30 days by IT Server Operations, unless an IT Exception is approved by IT Security. Any changes to this schedule must be approved by the CAB and documented in the CMDB.

Roles and Responsibilities

Read moreAccess Control Policy

The following roles and responsibilities apply to the change management and control process:

  • IT Directors and Managers are responsible for proposing changes, overseeing the implementation of changes, and reviewing the effectiveness of changes.
  • The CAB is responsible for evaluating and approving proposed changes, and for overseeing the change management process.
  • IT Server Operations is responsible for patching servers and for managing changes to the IT infrastructure.
  • IT Security Operations is responsible for approving IT Exceptions and for managing changes to the IT security environment.
  • IT Audit and Compliance is responsible for ensuring that all changes comply with relevant laws, regulations, and standards.

Policy Compliance

All EDC Inc employees, contractors, and third-party service providers are required to comply with this policy. Failure to comply with this policy may result in disciplinary action, up to and including termination of employment or contract.

Policy Review

Read moreIncident Response and Management Policy

This policy will be reviewed at least annually by IT Audit and Compliance, or more frequently if necessary due to changes in business needs or technology. Any changes to this policy will be approved by the CAB and communicated to all relevant parties.

Summary

The EDC Inc Change Management and Control Policy provides a framework for managing and controlling changes within the organization. By following this policy, EDC Inc can ensure that all changes are managed in a controlled and systematic manner, reducing the risk of unintended impacts on the business and its operations. This policy is essential for maintaining the integrity and stability of EDC Inc’s IT infrastructure, and for supporting the achievement of the organization’s business objectives.

You may also like

Team Department Details

Links and Services

Contact Information for Customers who need support.

252 comments

Leave a Reply to 維修Whirlpool 惠而浦 Cancel reply

Your email address will not be published. Required fields are marked *