<aside>

Purpose


The purpose of this policy is to establish a standardized framework for managing changes to software systems, infrastructure, and processes in a manner that minimizes risk, ensures compliance, and maintains service continuity. This policy is critical for supporting a stable and secure Software-as-a-Service (SaaS) environment.

Scope


This policy applies to all changes made to production systems, including software applications, infrastructure, configurations, processes, and third-party integrations. It is applicable to all employees, contractors, and third-party service providers involved in the development, deployment, and maintenance of SaaS products.

Objectives


Definitions


Term Definition Examples
Change Any modification to systems, software, infrastructure, or processes that may affect functionality, security, or service delivery • Code updates or deployments
• Infrastructure upgrades or replacements
• Configuration adjustments
• Process or policy changes
Change Request A formal proposal to modify a system or process, including details about the purpose, scope, and potential impact of the change.
Change Reviewer One or more stakeholders responsible for reviewing and approving changes based on risk, impact, and alignment with business objectives. - Senior developer

Policy Statements


1. Recording changes