The Official Web site for the Office of Information Technology - UTSA

This document should be rendered in an HTML format with cascading style sheets and JavaScript turned on.

Skip to Main Content

Skip to Navigation

Skip to office quick links

If you are using a screen reader to view this page, please take a few minutes to read our Accessibility Page which will make your visit through this Web site easier.

Site Map

Copyright (c) 2008. The University of Texas at San Antonio. All rights reserved.

Staff | Faculty | Students | Researchers | Quick Links

OIT Home > Security > Information Resource Standards > Change Management Standard

Change Management Standard

Purpose - The Change Management Standard provides a plan for the development, implementation and management of changes to UTSA computer systems. Changes require serious forethought, careful monitoring and follow-up evaluation to reduce negative impact to the user community and to increase the value of information resources (IR).

Audience - The UTSA Change Management Standard applies to all individuals who develop, install, operate or maintain information resources.

  1. Every change to UTSA multi-user production IR such as operating systems, computing hardware, networks and applications is subject to the Change Management Standard and must follow the applicable documented change management procedures.

  2. All changes affecting computing environmental facilities (e.g., air conditioning, water, heat, plumbing, electricity and alarms) must be reported to or coordinated with the director of technical support services or designee.

  3. Changes to any central computing systems supported by the Office of Information Technology must be thoroughly documented. Departmental systems administrators must maintain logs of system changes.

  4. Changes in the major administrative systems supported by OIT will be transferred to the production environment through specialized automated control systems.

Account Management

File Sharing

Network Configuration

Server Hardening

Administrative/Special Access

Incident Management

Password

Software Licensing

Backup and Data Recovery

Information Services Privacy

Physical Access

Vendor Access

Change Management

Internet Use

Portable Computing

Virus Protection

Data Classification

Intrusion Detection

Security Monitoring

Wireless Communication

E-Mail Management

Network Access

Security Training