Policy

advertisement
Policy
Effective Date
March 19, 2007
Date of Last Revision
October 7, 2014
Chapter Name
Information Management
Chapter Number
Title
4.4
Change Management for IT Managed Systems
1.0 Purpose
The purpose of this policy is to document change management expectations for all IT managed production systems.
2.0 Scope
This policy applies to IT employees planning changes affecting any IT managed production system. Nonproduction systems are beyond the scope of this policy.
3.0 Policy
All changes to IT managed systems shall adhere to defined procedures for change management. Procedures shall
assure appropriate change planning, change documentation and change execution to minimize service disruption and
unplanned outages. The procedures shall define change documentation requirements as well as requirements for
technical and management review.
Changes shall be categorized as application development changes, infrastructure and operations changes, or
emergency changes. Approvals shall be obtained as defined in the associated procedures except that the CIO or
her/his designee must also approve emergency changes.
4.0 Responsibility for Implementation
The responsibility for implementation of this policy resides with the Chief Information Officer and/or designee(s).
5.0 Enforcement
Any employee found to violate federal or State of Michigan laws, EMU policies, procedures or standards of
conduct, will be subject to disciplinary action under University policy. Any student found to violate federal or State
of Michigan laws, EMU policies, procedures or standards of conduct, will be subject to disciplinary action under
EMU’s Student Code of Conduct. Any suspected violation of State or Federal laws will be reported to the
appropriate legal authority for investigation.
The University reserves the right to protect its electronic resources from threats of immediate harm. This may
include activities such as disconnecting an offending computer system from the campus network, terminating a
running job on a computer system, or taking other action.
6.0 Definitions
Term
Application Development
Change
Change Documentation
Definition
Changes made to application technical objects including changes that are
generally managed by the Director of Enterprise Applications.
The addition, removal, or modification of any component of a production system.
Changes may include software, operating systems, hardware, or other
components of a production system.
Auditable documentation that demonstrates adherence to change management
policy and procedures including, but not limited to, change logs, written change
approval documents, and archival copies of change related artifacts.
IT Policy 4.4 – Change Management for IT Managed Systems
Page 1 of 2
Change Execution
Emergency Change
Infrastructure and Operations
Changes
Non-Production System
Production system
An approved plan for implementing a change that minimizes risk of service
disruption and unplanned outage.
Changes that Division of Information Technology management determine to be
extremely urgent such as those changes that management believes would increase
risk to the institution if normal change processes are followed.
Changes made to servers, operating systems and other components, generally
managed by the Division of Information Technology.
Systems managed by the Division of Information Technology that are used to test
or validate system changes.
Systems managed by the Division of Information Technology that are in active
use by the University Community supporting the routine business operations of
the institution.
7.0 Revision History
Description
Revised by L Rose
Approved by CIO
IT Policy 4.4 – Change Management for IT Managed Systems
Approval Date
October 9, 2014
October 9, 2014
Page 2 of 2
Download