DevOps-Security-Agent-Skills/compliance/governance/change-management/SKILL.md

name, description, license, metadata

name	description	license	metadata
change-management	Implement change management processes. Configure CAB reviews, change windows, and rollback procedures. Use when managing production changes.	MIT	author version devops-skills 1.0

Change Management

Implement structured change management processes.

Change Process

change_workflow:
  1_request:
    - Change description
    - Risk assessment
    - Rollback plan
    - Testing evidence
    
  2_review:
    - Technical review
    - Security review
    - CAB approval (if high risk)
    
  3_schedule:
    - Change window
    - Communication
    - Resource allocation
    
  4_implement:
    - Execute change
    - Verify success
    - Update documentation
    
  5_review:
    - Post-implementation review
    - Lessons learned

Change Classification

Type	Risk	Approval	Example
Standard	Low	Pre-approved	Patching
Normal	Medium	Manager	Config change
Emergency	Variable	Expedited	Security fix

Pull Request Template

## Change Description

## Risk Level
- [ ] Low - Standard change
- [ ] Medium - Normal change
- [ ] High - CAB required

## Testing
- [ ] Unit tests pass
- [ ] Integration tests pass
- [ ] Staging deployment verified

## Rollback Plan

## Stakeholders Notified
- [ ] Operations
- [ ] Security
- [ ] Business owners

Best Practices

• Clear change categories
• Required approvals by risk
• Rollback procedures documented
• Post-change verification
• Change freeze windows