Changes to systems and networks happen every day. When implemented, changes usually come with some risk of system failure. They can also inadvertently weaken security. A documented, policy-driven change management process helps reduce risks associated with change. The process should always include three phases: submission, change approvals, and a decision point at which the change management team decides whether or not the change should go before the CAB. The important takeaway is to ensure any availability or security risk is addressed before implementing the change.”]
Source: https://www.csoonline.com/article/3067112/ensure-business-continuity-with-change-management.html