Change Management Procedures

What is a documented procedure that reverses a change and restores the system to its previous known-good configuration if the change fails

Rollback plan

What is a documented process for creating and storing copies of data so that the data can be restored if it becomes lost, corrupted, or damaged

Backup plan

What is the practice of implementing and verifying a change in an isolated, non-production environment specifically designed to prevent any impact on live systems

Sandbox testing

What is the reason for documenting staff members responsible for each stage of a business process

To ensure accountability

What documnet must be submitted first to initiate a formal change to management process and update firmware on all backbone switches in a data center

Change request form

What part of the change management process is justifying the replacement by noting why the change will help

Purpouse of the change

What part of the change management process details how a change will impact a business or company

Scope of the change

How should a monthly update of antivirus be classified if it is low-risk and has a pre-approved procedure

Standard change

What type of change is an organization planning on moving its entire on-premises email system to a cloud based one that requires a formal approval and risk assesment

Normal change

What classification of change is a critical security vulnerability being discovered and an immediate patch must be applied outside the regular maintenance window

Emergency change

What change management concept is a non-urgent change being denied due to more important reasons

Change freeze

What is an authorized timeframe that a policy enforces where all non-emergency software patches must be deployed in

Maintenance window

What part of a change request should include a list of all VLANs and servers that will lose connectivity during the reboot

Affected systems/impact

What is a section of a change request that lists the assesed likelehood of potential negative outcomes

Risk level

What element of the change management process ensures that a change is formally authorized

Change board approvals

What is a representation of the implementation phase of the change management process

Applying a configuration update to a server according to a documented procedure

When does formal peer review of a proposed change typically occur in the change management lifecycle

Before the implementation phase

When does end-user acceptance typically take place in a standard change management workflow

In a test environment before full production deployment

What are the steps in the change management process

1. Complete request forms

2. Determine the purpouse

3. Identify the scope

4. Schedule a date and time

5. Determine impact

6. Analyze risk

7. Get change board approval

8. Obtain end-user acceptance