Change/Configuration Management
1upHealth shall manage changes to production systems through a Change Management process as defined in the 1upHealth Standard Operating Procedures manual. All changes to production systems shall be requested, evaluated, and approved by a Change Advisory Board. The specific requirements for changes shall include:
    Changes must be requested by the system owner.
    Changes must be evaluated for operational and security risk, and these risks must be documented in the change request.
    Changes must be tested by QA or peer reviewed prior to approval and implementation
    Rollback procedures must be defined as part of the change request.
    All changes must be approved by the CAB before implementation.
    Emergency changes must be approved according to the approval processes defined in the Change Management process.
    IT shall maintain a change log of all changes to production systems.
Last modified 4mo ago
Copy link