Glossary: Governance, Risk and Compliance

change management policy

Also written: change management

A high-level policy saying how changes to systems must be requested, approved and tested before they go live. It reduces the risk that an unplanned change causes an outage. Auditors often sample change tickets to check that each change was approved.