Summary
QR Planet's Change Management Policy has been developed, documented and approved by management and appropriate consultants. It has been communicated to all employees and partners necessary and is regularly reviewed by management to maintain the policy and keep it up to current standards.
Change control process
- We utilize a formal change control process to ensure clients are notified prior to changes being made to our production environment which may impact their service.
- We specify and implement information security requirements
when new systems are introduced or old ones are upgraded/enhanced. - New, upgraded or enhanced systems must include a determination of security requirements based on the sensitivity of the data.
Key points of our Change Management
All changes to the production environment or systems it relies on require
- comliance with the change control process,
- sufficient testing prior to deployments,
- stakeholder communication or approvals,
- comprehensive documentations for all system changes,
- version control for all software and
- the logging and documentation of all Change Requests.
Ensuring high availability of our service
We only deploy changes during scheduled maintenance windows, keeping downtimes short and avoid them alltogether, if technically possible. To do so, we employ techniques such as rolling updates and redundancies. Maintenance windows are planned during non-peak hours.