01 - Change Management Process
01 - Change Management Process
V1.1
.
Change Management Process
1. DOCUMENT CONTROL
DOCUMENT NAME Change Management Process Document
ABSTRACT This document provides a detailed view into the Change Management
process which must be followed in Commercial Bank of Ethiopia (CBE)
.
DOCUMENT REFERENCE ITIL Standard Reference documents
SECURITY Commercial-in-confidence
CLASSIFICATION
Reviewer
Approver
Version History:
Version Date Author Changes & Reasons for Change
V 1.0 17/08/2017 John Paul Innocent Initial version of the document
V.1.1 05/10/2017 John Paul Innocent Final Version
Table of Contents
1. DOCUMENT CONTROL 2
2. PURPOSE 4
3. OBJECTIVES 4
4. SCOPE 4
5. ACRONYMS AND DEFINITIONS 4
6. PROCESS OVERVIEW 6
7. PROCESS INTERFACE WITH CHANGE MANAGEMENT 6
8. ROCESS FLOW CHART AND DESCRIPTION 7
7.2 EMERGENCY CHANGE 10
7.3 CHANGE ASSESSMENT 14
7.4 CHANGE ASSESSMENT BY ECAB/CAB 19
7.5 CHANGE DEPLOYMENT 23
7.6 MAJOR CHANGE SCHEDULING AND BUILD AUTHORIZATION 28
7.7 CHANGE DEPLOYMENT AUTHORIZATION 33
7.8 PIR AND CHANGE CLOSURE 37
9. RACI MATRIX 41
10. KEY PERFORMANCE INDICATORS AND REPORTS 42
11. TOOLS 42
12. ROLES & RESPONSIBILITIES 42
13. Appendix 44
2. PURPOSE
3. OBJECTIVES
The purpose of change management activities is to effectively manage and control the
lifecycle of a change and enable beneficial changes to be made with minimum
disruption to the IT services.
4. SCOPE
Change Management process scope includes all the changes executed within CBE IT
environment.
Following types of changes are not covered in the scope of change management process
a. IT Service Documentation Changes (both technical and non-technical
documents)
b. Contractual and Supplier specific documentation and information
c. Changes directly managed and executed by Third-party Suppliers outside CBE
IT Environment
Terms Description
Any event that is not part of the standard operation of a service and
Incident that causes, or may cause, an interruption to, or a reduction in, the
quality of that service
Component of infrastructure, or an item, such as a Request For
Change associated with infrastructure, that is (or is to be) under the
Configuration control of Configuration Management. CI’s may vary widely in
Item (CI) complexity, size and type, from an entire system (including all
hardware, software and documentation) to a single module or a minor
hardware component
Configuration Management Database - A database that contains all the
CMDB relevant details of each CI and details of the important relationships
between CI’s
Known Error An Incident or Problem for which the root cause is known and for
which a temporary Workaround or a permanent alternative has been
identified. If a business case exists, an RFC will be raised, but, in any
event, it remains a known error unless it is permanently fixed by a
Solution
FSC Forward Schedule of Changes
Measure of the business criticality of an Incident. Often equal to the
Impact extent to which an Incident leads to distortion of agreed or expected
service levels
New Service A service not defined and agreed as per the service catalogue
OLA Operational Level Agreement
The sequence in which an Incident or Problem needs to be resolved,
Priority
based on impact and urgency
Problem Unknown underlying cause of one or more Incidents
RCA Root Cause Analysis
Formal change request, including a description of the change,
Request for
components affected, business need, cost estimates, risk assessment,
Change (RFC)
resource requirements, and approval status
CAB Change Approval Board
ECAB Emergency Change Approval Board
Build Team Technical team involved in building the Change components
PSO Projected Service Outage
Resolution Action that will resolve an Incident. This may be a Workaround
“One or more IT systems which enable a business process”. In the
context of this procedure ‘new services’ are created when a ‘formal
Service
project’ is undertaken by the organisation to introduce significantly
new hardware and software into the organisation
Service
Written statement of IT services, default levels and options
Catalogue
SLA Service Level Agreement
Passing information and/or requesting action on an Incident to more
senior staff (hierarchical escalation) or other specialists (functional
Escalation escalation). The circumstances in which either vertical escalation for
information/authority to apply further resources or horizontal
escalation for greater functional involvement need to be precisely
defined and automated, so that the purpose of the escalation and the
nature of the required response is effective.
Category Classification of a group of Configuration Items.
Change request or Request for Change (RFC)
Work around Method of avoiding an Incident, either from a temporary fix or from a
technique that means the Customer is not reliant on a particular
aspect of a service that is known to have a problem.
Data repository holding information on Incidents, Problems and Known
Knowledge
Errors, enabling the support teams to match new Incidents against
Database
previous ones and thus to reuse established solutions and approaches.
Output/Exit The output and exit criteria for the activity
Post Implementation Review: A review is conducted for all changes
that are implemented through the Change Management process for
PIR
Impact analysis and to identify reasons for success/failure of the
Change
SLM Service level Management
6. PROCESS OVERVIEW
Templates
Procedures, Guidelines
1. Change Management Guideline
Change Change
RFC Logging & Emergency Change Change Major Change PIR & Change
Assessment by Deployment
Review Change Assessment Deployment Scheduling Closure
CAB Authorization
Change Management
Change Practitioner
Entry Input Change Manager Output Exit
(2nd /3rd level Support)
RFC
Raised To
RFC Emergency
1 Change
Create Change Record from RFC and
Log receipt Change to be
Assessed by
Change 3 ECAB
Management Classify as
Guidelines Emergency
RFC Logging and Review
Emergency Change
RFC 2
Raised Emergency Yes
Change?
5 6
RFC No Notify RFC initiator regarding
Accepted? rejection stating the reasons To Change
Assessment
7 Updated Change RFC
Update Change Record with Record Accepted
status and reason for rejection
8
Yes Document RFC Acceptance in
Change record & notify initiator
Step No 1
Activity Name Create Change Record from RFC and Log Receipt
Activity Description Based on the below mentioned triggers a request for
change (RFC) is requested and a change record is
raised.
Incident or Problem Ticket
System changes triggered by Project
requirements
Regular/Standard System changes
Regular bug fixing
New business requirements
Each RFC/change record is identified by a unique
reference number (usually called the RFC number
CR000012345) that is used identify and track the
change throughout its lifecycle
Change Justification category needs to be selected
before submitting the change request:
New product/Application
New Equipment
Infrastructure release/Enhancement (no
Application Impact)
Software Release/Enhancement
Fix infrastructure problem or maintenance
Fix application software problem
Step No 2
Step No 3
Step No 4
Step No 5
Templates None
Step No 6
Step No 7
Step No 8
Change Change
RFC Logging & Emergency Change Change Major Change PIR & Change
Assessment by Deployment
Review Change Assessment Deployment Scheduling Closure
CAB Authorization
Change Management
Change Practitioner
Entry Input Change Manager ECAB (2nd /3rd level Coordinator Output Exit
Support)
9 11
RFC Determine Required Assess Risks associated
Change to be ECAB Members with the change
Assessment and Implementation of Emergency Change
Assessed by
ECAB To PIR &
12 Change
Change 10
Assess urgency of Closure
Management Convene ECAB
proposed change
Guidelines
Emergency
13 Change
Assess consequences if Implemented
Risk the change is not
Assessment implemented
Form 14
Identify resources for
implementation
19
Coordinate to Update
CMS as appropriate
15
Document the change 18 Updated
assessment Update the Change Change Record
Record
16
17
Authorize
Yes Coordinate to Implement Emergency
Emergency
the Emergency Change Change
Change? 20
Rejected
Notify RFC initiator
No
regarding rejection
stating the reasons
21
Update Change Record
with status and reason
for rejection
Step No 9
Step No 10
Step No 11
Activity Name Assess Risks associated with the change
Based on the available information the ECAB subject
matter experts will assess the risks of moving the
Activity Description
change to production environment. These risks will be
recorded in the Change Risk assessment form
Interfacing
None
Processes/Function
Templates None
Step No 12
Activity Name Assess urgency of proposed change
Based on the available information the ECAB subject
matter experts will assess the current urgency of
Activity Description moving the change to production environment. If the
urgency is found incorrect, the ECAB will propose new
urgency for the change.
Interfacing
None
Processes/Function
Templates None
Step No 13
Activity Name Assess consequences if the change is not implemented
The ECAB team will assess the consequences if the
change is not implemented. A consensus is reached
Activity Description within the ECAB team when assessing the impact of
not implementing this change. Business impact is one
of the factors considered during this assessment.
Interfacing
None
Processes/Function
Templates None
Step No 14
Activity Name Identify resources for implementation
Once all the assessment for the emergency change is
completed, the ECAB subject matter experts will
identify and finalize the necessary resources needed
Activity Description for implementing this change. The resources would
cover personnel, infrastructure, software, applications,
third party supplier involvement, service down-time,
and additional budget as parameters.
Interfacing
None
Processes/Function
Templates None
Step No 15
Activity Name Document the change assessment
Activity Description The change manager will formally record the outcome
of assessment performed by the ECAB team and share
with them requesting for final approval of the
emergency change to go-live as per proposed
V 1.0 Commercial Bank of Ethiopia - Confidential Page 11
of 44
Change Management Process
timelines.
Interfacing
None
Processes/Function
Templates None
Step No 16
Activity Name Authorize Emergency Change?
The ECAB team will formally authorize the emergency
change to go-live.
If approved, it will go to step ‘Coordinate to
Activity Description
Implement the Emergency Change’
If rejected, it will go to step ‘Notify RFC initiator
regarding rejection stating the reasons’. (Step 20)
Interfacing
None
Processes/Function
Templates None
Step No 17
Activity Name Coordinate to implement the Emergency Change
After authorization from ECAB the change coordinator
will follow up with technical teams to implement the
emergency change in test and production environment
Activity Description as per the final plan/proposal from ECAB team. During
this coordination all resources identified for the change
will be mobilized, necessary communication will
shared with business and IT operational teams.
Interfacing
Processes/Function
None
Step No 18
Activity Name Update the Change Record
On successful deployment of the emergency change
the change practitioner will update the change record
Activity Description retrospectively to ensure all necessary data and
information is available for future reference about this
change.
Interfacing
None
Processes/Function
Templates None
Step No 19
Coordinate to update CMDB ( Configuration Database)
Activity Name
as appropriate
The configuration items that were impacted and have
changed status quo because of the deployment of the
emergency change are checked by the Configuration
management and technical management team. The
Activity Description change coordinator ensures all latest status and data
about the configuration items and assets are updated
in the configuration management system. The change
coordinator communicates these changes within the IT
operations team as part of the regular updates.
Interfacing
Service Asset and Configuration Management
Processes/Function
Templates None
Step No 20
Notify RFC initiator regarding rejection stating the
Activity Name
reasons
The change practitioner will notify the status of RFC as
Activity Description ‘rejected’ to the initiator of the RFC along with reason
and next steps (if required).
Interfacing
None
Processes/Function
Templates None
Step No 21
Update Change Record with status and reason for
Activity Name
rejection
The change practitioner will update the change record
Activity Description
with as rejected along with the reason of rejection
Interfacing
None
Processes/Function
Templates None
Change Management
Change Practitioner
Entry Input Change Manager Output Exit
(2nd /3rd level Support)
To Change
Deployment (
From RFC RFC 23 22 Release
Logging and Categorize the Change Identify affected CIs Process)
Review Implement
Standard
RFC Change Change
24
Accepted Management 25
Standard (pre-
Guidelines Yes
approved) Update Change Record
Change? Updated Change
Record
No
Change Assessment and Categorization
Risk Assessment 26
Form Assess Impact, Risks and
Assign Initial Priority
27
Major Change?
To Change
No Assessment
30 by the CAB
CMDB Yes
ERB/CAB Change
No A
Required? Assessment
by CAB
Yes
Change 29
Management Policy 28
Update Change Record with
Identify CAB Members
CAB Info
31
To Change
Formal Change
A Scheduling and Build
Evaluation
Authorization Sub-
Required?
process
Yes Implement
34 Interim Evaluation
No Update Change Record with Minor
Report
32 Status and updated priority Change
Interim Evaluation
Evaluate Change
Report Yes
35 Updated Change
Notify RFC initiator regarding Record
rejection stating the reasons
33
Approve RFC? RFC
36
Update Change Record with Rejected
No status and reason for rejection
Step No 22
Templates None
Step No 23
Step No 24
Templates None
Step No 25
Templates None
Step No 26
Templates None
Step No 27
Templates None
Step No 28
Templates None
Step No 29
Templates None
Step No 30
Templates None
Step No 31
V 1.0 Commercial Bank of Ethiopia - Confidential Page 16
of 44
Change Management Process
Templates None
Step No 32
Templates None
Step No 33
Templates None
Step No 34
Activity Name Update change record with status and updated priority
All minor changes that are approved by change
Activity Description manager will be further updated by the change
practitioner to set the correct status and priority.
Interfacing
None
Processes/Function
Templates None
Step No 35
Templates None
Step No 36
Templates None
Change Change
RFC Logging & Emergency Change Change Major Change PIR & Change
Assessment by Deployment
Review Change Assessment Deployment Scheduling Closure
CAB Authorization
Change Management
Change Practitioner
Entry Input Change Manager ECAB/CAB Output Exit
(2nd /3rd level Support)
Change
Assessment 38
37 Circulate RFC and Related
by CAB RFC Schedule CAB Meeting Documents for Preparation
by CAB
39
Change Review RFC and Related
Management Documents
Guidelines
40
Formal
CAB Agenda Evaluation Yes
Template Required?
Change Assessment by the CAB
41
Understand effects of the
change and Identify
Predicted Performance
Risk Assessment
Form
No 42 43
Asses Risks and Conduct Document the Change
Feasibility Analysis Assessment To Major Change
Scheduling and Build
Authorization Sub-
process
45 44
Escalate to Higher Authority Yes Escalate before Change
for Approval Approval? Approved
Interim Evaluation for
Report Planning
No
48
46
Yes Update Change Record with
Approval
47 Status
Obtained from Yes
Approve Change?
Higher Change
Authority? 49 Updated Change Rejected
No Notify RFC initiator regarding Record
rejection stating the reasons
No
50
Update Change Record with
status and reason for rejection
Step No 37
Templates None
Step No 38
Templates None
Step No 39
Templates None
Step No 40
Templates None
Step No 41
Templates None
Step No 42
Templates None
Step No 43
Templates None
Step No 44
Templates None
Step No 45
Templates None
Step No 46
Templates None
Step No 47
Templates None
Step No 48
Templates None
Step No 49
Templates None
Step No 50
Templates None
Change Change
RFC Logging & Emergency Change Change Major Change PIR & Change
Assessment by Deployment
Review Change Assessment Deployment Scheduling Closure
CAB Authorization
Change Management
Change Practitioner
Entry Input Change Manager Change Coordinator Output Exit
(2nd /3rd level Support)
Implement
Standard 54
51 53
Change Coordinate with Technical
Build No Identify Technical Team to A
Approved RFC Team to Plan the Change
Authorization Implement the change Change
Build, Test & Implementation
Required? Approved for
Planning
From Change 55
FSC
Assessment Coordinate with Technical No
Team to Develop, Build and
57 test the Change To Major Change
Yes Ensure Deployment Scheduling and Build
Yes 56 Authorization Sub-
Release Plan Schedule is aligned with FSC
Implement (Change Window) Test Successful? process
Minor
Change No
Change Deployment
52
58
A Add change to FSC and
60
Change Windows
Update Change Record
Available? Coordinate with SACM Team
From Change to take Baseline Request for
Assessment Baselining
Change Freeze Yes
Dispensation
Form 59 Yes
61
CI Baseline
Inform Stakeholders of
Required? To Service Asset
Change Deployment Plan
No & Configuration
Management
63 62
Process
B Review the Deployment Coordinate with Technical
Baselining Results Team to Deploy the Change
Completed
B
64
Change 67
No Change
From Service Successfully Identify Corrective Actions
Deployed? Implemented
Asset & 65
Configuration Coordinate to update CMDB
Yes Updated Change
Management with information on affected
Process CIs Record
66
Update Change Record with
Deployment Status & Inform
Initiator
Step No 51
authorization.
If build authorization is required, go to step ‘Add
change to FSC and Update Change record’
If build authorization is not required, go to step
‘Identify Technical team to Implement the Change’
Interfacing
None
Processes/Function
Templates None
Step No 52
Templates None
Step No 53
Templates None
Step No 54
Templates None
Step No 55
Templates None
Step No 56
Templates None
Step No 57
Templates None
Step No 58
Templates None
Step No 59
Templates None
Step No 60
Templates None
Step No 61
Templates None
Step No 62
Interfacing
None
Processes/Function
Templates None
Step No 63
Templates None
Step No 64
Templates None
Step No 65
Templates None
Step No 66
Templates None
Step No 67
Templates None
Change Change
RFC Logging & Emergency Change Change Major Change PIR & Change
Assessment by Deployment
Review Change Assessment Deployment Scheduling Closure
CAB Authorization
Change Management
Change Practitioner
Entry Input Change Manager ECAB/CAB Output Exit
(2nd /3rd level Support)
68
69 Release
Approved RFC Prepare Schedule and
Change Review RFC, FSC and Planning
Update FSC with Approved
Approved authorize Release Planning Authorised
RFC
for
Planning FSC
71
70 To Release
Formal
Review Release Plan and Management
Major Change Scheduling and Build Authorization
Release Evaluation
Test Plan process
Plan Required?
PSO
Created Yes
Planned 72
Downtime Review and Evaluate the
(Availability Project Plan and Test Plan
From Release management)
75
Management
Document Findings in
Process 73
Release Plan Change Record
Perform Risk Assessment No
74 Updated Change
Test Plan Perform Feasibility Analysis Record
for Build To BUILD
Team
76 Change
77 Build
Additional
Escalate to Higher Authority Yes Authorized
Approvals
for Approval Interim Evaluation
required?
Report
No 80
Update Change Record with Change
Interim Evaluation Status Rejected
Report 79 Yes
78
Authorize 81 Updated Change
Approval Yes
Change Notify RFC initiator regarding Record
Obtained?
Build? rejection stating the reasons
No
82
No Update Change Record with
status and reason for rejection
Step No 68
Activity Name Prepare Schedule and update FSC with approved RFC
All major and minor changes that are scoped for
further planning are picked up by the change manager
to plan release window as per available deployment
Activity Description dates and prepare a forward schedule of changes
(FSC). This forward schedule of changes is published
and shared with release and deployment manager who
create or update the release plan
Interfacing
None
Processes/Function
Templates None
Step No 69
Templates None
Step No 70
Templates None
Step No 71
Templates None
Step No 72
Activity Name Review and Evaluate the Project Plan and Test Plan
The ECAB/CAB team evaluates the project plan and
test plan for all major and minor RFCs as per the
Activity Description
criteria provided in the ‘Change Management
guidelines’ document
Interfacing
None
Processes/Function
Templates None
Step No 73
Step No 74
Templates None
Step No 75
Templates None
Step No 76
Templates None
Step No 77
Templates None
Step No 78
Templates None
Step No 79
Templates None
Step No 80
Templates None
Step No 81
Templates None
Step No 82
Templates None
Change Change
RFC Logging & Emergency Change Change Major Change PIR & Change
Assessment by Deployment
Review Change Assessment Deployment Scheduling Closure
CAB Authorization
Change Management
Change Practitioner
Entry Input Change Manager ECAB/CAB Output Exit
(2nd /3rd level Support)
83
From Build RFC Formal
Team No A
Evaluation
Required?
Release
Build & Test Build and Test Yes
Completed Results 85
84
Circulate Documents for
Schedule CAB Meeting
Change Deployment Authorization
Preparation
Project 86
(Deployment) Check RFC for completeness
Plan of Change Components
87
Check RFC for
Completeness of Test
88
Check Actual Performance
90
89
Document the Change
Assess the Project Plan
Assessment
91
92 Updated Change
93 Authorize
No Yes Update Change Record and Record To Release
Initiate Corrective Action Change
Change Schedule Management
Deployment?
Change
Deployment
Interim Evaluation
Authorized
Report
A
Evaluation Report
Step No 83
Templates None
Step No 84
Templates None
Step No 85
Templates None
Step No 86
Templates None
Step No 87
Templates None
Step No 88
Templates None
Step No 89
Templates None
Step No 90
Templates None
Step No 91
Templates None
Step No 92
Interfacing
None
Processes/Function
Templates None
Step No 93
Templates None
Change Change
RFC Logging & Emergency Change Change Major Change PIR & Change
Assessment by Deployment
Review Change Assessment Deployment Scheduling Closure
CAB Authorization
Change Management
Change Practitioner
Entry Input Change Manager Output Exit
(2nd /3rd level Support)
Emergency
Change
Implemented Change Record
94
Formal
Evaluation
Post Implementation Review and Change Closure
Required?
Deployment
From Report Yes 96
Change Capture customer feedbacks
95
Deployment and IT staff feedback
Investigate achievements of
change objectives involved in implementation
Change
Implemented
98 97
Analyse and identify lessons Capture unpredicted side-
learnt effects of change
No
From Release
& Deployment
Mgmt
Change
Implemented
99
100 Document PIR report in a
Change Evaluation Report
Change Evaluation report
Successful?
No Change
Yes
Closed
102 101 104 Updated Change
Determine Verify if new Set change to status record
follow-up change model ³Closed´
actions should be created
Step No 94
Templates None
Step No 95
Templates None
Step No 96
Templates None
Step No 97
Templates None
Step No 98
Templates None
Step No 99
Templates None
Step No 100
Templates None
Step No 101
Templates None
Step No 102
Templates None
Step No 103
Templates
Step No 104
Templates None
9. RACI MATRIX
Below table highlights the roles and responsibilities for Change Management Process
11. TOOLS
CBE has <<SMO Tools >> which is being used for ticketing and tracking of overall
IT operations services, The proposed processes needs to be digitized (for e.g.
workflows, Roles, configuration, Assignment and resolver groups, Escalation matrix &
Service levels) in the tool to ensure effective implementation of processes and
measure performance effectively.
The Tools needs to be customized to generate reports aligned with measurement
criteria’s and service improvement defined for each process.
Role Responsibilities
Change Manager Carrying out the generic process manager role for
the change management process
Planning and managing support for change
management tools and processes
Maintaining the change schedule and projected
service outage
Designing change authority hierarchy and criteria
for allocating RFCs to change authorities
Designing change models and workflows
13. APPENDIX
ECAB/CAB Template
<< Please attach CBE
ECAB/CAB Template>>
CBE Forward
Change Schedule - Template.xlsx
CBE Change
Management Guideline
CBE - Change
Management Guidelines.docx
CBE Priority
Guide.docx
CBE - Risk
Assessment Template.xlsx
Change
Management Process
Workflow
Commercial Bank of
Ethiopia - Change Managemnet Process Flow Diagram.vsdx
RFC Template