Change/Configuration Management
1upHealth shall manage changes to production systems through a Change Management process as defined in the 1upHealth Standard Operating Procedures manual. All changes to production systems shall be requested, evaluated, and approved by a Change Advisory Board. The specific requirements for changes shall include:
  • Changes must be requested by the system owner.
  • Changes must be evaluated for operational and security risk, and these risks must be documented in the change request.
  • Changes must be tested by QA or peer reviewed prior to approval and implementation
  • Rollback procedures must be defined as part of the change request.
  • All changes must be approved by the CAB before implementation.
  • Emergency changes must be approved according to the approval processes defined in the Change Management process.
  • IT shall maintain a change log of all changes to production systems.
Copy link