Change Management Flashcards
What is a common way to make a change in IT?
Upgrade software, patch an application, change firewall configuration, modify switch ports.
What is one of the most common risks in the enterprise regarding change?
Changes occur very frequently.
Why are changes often overlooked or ignored?
People may not feel the immediate impact until it’s too late.
What should be included in clear change management policies?
Frequency, duration, installation process, rollback procedures.
Why can implementing change be extremely difficult?
It’s hard to change corporate culture.
What is the purpose of a formal change approval process?
To avoid downtime, confusion, and mistakes.
What is the first step in a typical change approval process?
Complete the request forms.
What must be determined after completing the request forms in the approval process?
The purpose of the change.
What should be identified in the change approval process?
The scope of the change.
Why is it important to analyze the risk associated with a change?
To understand potential impacts and avoid negative outcomes.
Who typically gets approval from the change control board?
The individual or team responsible for the change request.
What does the owner of a change manage?
The overall process and ensures adherence to procedures.
Who usually handles the actual change in a process?
The IT department.
Why is it important to identify stakeholders in change management?
They are impacted by the change and may provide valuable input.
What can happen when a single change affects multiple departments?
It can complicate the change management process significantly.
How should risk values be categorized during impact analysis?
High, medium, low.
What risks might arise from not making a change?
Security vulnerabilities, application unavailability, unexpected downtime.
What is a sandbox testing environment?
A safe space to test changes without affecting production systems.
What should be confirmed before making a change in production?
The backout plan.
Why is it essential to have a backout plan?
To revert changes if something goes wrong.
What is a crucial consideration when planning a maintenance window?
The timing of the change to minimize impact on operations.
Why might overnight changes be preferable?
They minimize impact on production during business hours.
What should be available on the Intranet regarding change management?
Well-documented standard operating procedures.
How should changes to the change management process be handled?
They should be reflected in the standard operating procedures as a living document.