Use the questions included in this tool to ensure that all changes to IT resources and infrastructure configurations are carried out in a planned and authorized manner.

Sample questions include: Do you have enterprisewide change management standards? How are the change management standards communicated to IT personnel? How often are the change management standards followed? How are change requests for minor enhancements, major projects or operational issues in the production system submitted and captured by the organization? Does an impact analysis process exist in which key IT and business owners review proposed changes to assess impacts?