change-management

1# Change Management
2 
3Implement structured change management processes covering change classification, CAB workflows, emergency change procedures, and automation for compliance with SOC 2, ITIL, and regulatory frameworks.
4 
5## When to Use
6 
7- Establishing change management processes for production environments
8- Implementing change advisory board (CAB) workflows
9- Defining change classification and approval requirements
10- Configuring automated change tracking in CI/CD pipelines
11- Handling emergency changes with proper controls and documentation
12 
13## Change Classification
14 
15```yaml
16change_types:
17  standard:
18    risk: Low
19    approval: Pre-approved (no per-change approval needed)
20    lead_time: None (within maintenance window)
21    examples:
22      - Routine patching within tested patch sets
23      - Certificate rotation with established procedure
24      - Scaling operations (adding/removing instances within limits)
25      - Pre-approved configuration changes
26      - Log rotation and archival
27    requirements:
28      - Change must match an approved Standard Change template
29      - Automated testing must pass
30      - Documented rollback procedure exists
31      - Within defined maintenance window
32 
33  normal_low:
34    risk: Low
35    approval: Peer review (1 approver)
36    lead_time: 2 business days
37    examples:
38      - Non-critical configuration changes
39      - Feature flag toggles
40      - Documentation updates to production systems
41      - Adding monitoring dashboards or alerts
42…