Controlled and Risk-Based Changes to Systems, Applications, Infrastructure and Configurations at Eye-Able
How does Eye-Able ensure that changes to systems, applications, infrastructure and configurations are made in a controlled and risk-based manner?
This article gives an overview of Eye-Able's change management approach and the measures used to manage changes in a traceable, compliant and SLA-compliant manner.
Formalised change management approach
Eye-Able pursues a formalised change management approach that manages all changes to IT systems, software, configurations and infrastructure on a risk-based basis – regardless of whether they are implemented internally or via service providers.
Documented change processes
Change processes are documented, governed by policies and subject to an annual review as well as continuous updating.
Approved baselines and logging
Every change is made on the basis of approved baselines and standardised testing and release processes and is connected to a central logging system.
Prevention of unauthorised changes
Unauthorised changes or uncontrolled interventions in systems and assets are excluded both technically and organisationally.
Automatic detection of deviations
Deviations from defined states are detected automatically and reported proactively.
Exception rules and approval processes
For exceptions, emergencies or configuration deviations, there are regulated approval and documentation processes that are aligned with common industry GRC standards (e.g. GRC-04).
Rollback procedures and service provider contracts
Rollback procedures are prepared and enable a controlled return to a secure operating state.
Contracts with service providers contain SLA provisions that ensure customer-critical changes are not made without explicit consent.
Ensuring audit-proof changes
These measures ensure that Eye-Able implements changes in an audit-proof and traceable manner and without unintended effects on operational stability or customer systems.
Further help
Do you have further questions or need personal support? The following article explains how you can get in touch with us: