Information Resources Use and Security Policy
6. Change Management
The university's Information Resources infrastructure is constantly changing and evolving to support the mission of the university. Computer networks, systems, and applications require planned outages for upgrades, maintenance, and fine-tuning. The Change Management Guidelines provide expanded detail for the following change management procedures that are required, as warranted by the Data Classification Standard and commensurate with the risk and value of the system and/or data:
6.1. All changes to environmental controls affecting computing facility machine rooms (for example, air-conditioning, water, heat, plumbing, electricity, and alarms) must be logged and reported to the appropriate college, school, or unit managing the systems in that facility.
6.2. Colleges, schools, or units responsible for information resources will ensure that the change management procedures and processes they have approved are being performed.
6.3. Colleges, schools, or units may object to a scheduled or unscheduled change for reasons including, but not limited to, inadequate planning, inadequate back out contingencies, inopportune timing in terms of impact on service to users or in relation to key business process such as year-end accounting, or lack of resources to address potential problems that may be caused by the change. The responsible party will review all objections.
6.4. Whenever possible, customers will be notified of changes following the steps contained in the change management procedures.
6.5. A responsible college, school, or unit, consistent with change management procedures, maintains a change management log for all significant changes including emergency changes. Change management log entries must contain at least the following information:
6.5.1. Date of submission and date of change;
6.5.2. Owner and custodian contact information; and
6.5.3. The nature of the change.
