Change Management Plan

This Change Management Plan provides a structured framework for managing changes to the organization’s ICT systems and processes in compliance with the Digital Operational Resilience Act (DORA). It aims to minimize risks, ensure operational resilience, and maintain regulatory adherence.

• Types of Changes: Categorizes changes as standard, normal, or emergency, with processes tailored to their complexity and urgency.
• Approval Process: Includes a formal review by the Change Advisory Board (CAB), risk assessments, and impact analyses.
• Implementation: Requires testing in non-production environments, monitored execution, and documentation of outcomes.
• Emergency Changes: Allows expedited approvals with retrospective reviews to address immediate risks.
• Continuous Improvement: Incorporates post-implementation reviews and updates to enhance the change management process.

This plan ensures that all ICT changes are handled securely and efficiently, supporting compliance with DORA and fostering operational excellence.