Controlling what is altered.
WHY IT MATTERS
Most facility incidents follow a change.
WHAT A CHANGE PROCESS REQUIRES
A description of the work An assessment of risk and what it affects A plan, with steps A rollback plan Approval Notification of those affected A record of what was done
WHAT TO CLASSIFY
Changes by risk, so minor work is not obstructed and major work is scrutinised.
WHAT TO SCHEDULE
Risky work during defined windows.
WHY WINDOWS
So customers know when risk is elevated, and staff are available.
WHAT TO FREEZE
Changes during periods of critical business activity.
WHAT TO REQUIRE FOR ANY WORK ON REDUNDANT SYSTEMS
Awareness that redundancy is reduced during the work.
WHY THAT MATTERS
While one path is being maintained, the other is a single point of failure.
WHAT TO AVOID
Working on both paths simultaneously Assuming a redundant system means work carries no risk
WHAT TO RECORD
Every change, with times.
WHY
It answers what changed, which is the first question in any incident.