Change management

Purpose

The primary objective of this policy is to ensure that a consistent and systematic approach is used for modifying Lynn University’s Information Technology services and resources. The intent is to streamline processes while mitigating security vulnerabilities and potential loss due to system outages. Modifications to IT services require serious forethought, testing, appropriate communication and post-change evaluation. Changes to university Information Technology Resources must have intended impact and avoid unintended consequences.

Policy

Any change that might affect Information Technology services or resources upon which university personnel rely to conduct normal business operations are within the scope of this policy. The following non-exhaustive list show common types of change:

1. Software upgrades, updates or additions;
2. IT infrastructure changes;
3. Preventative maintenance;
4. Security patches;
5. System architecture and configuration changes;
6. Hardware upgrades;
7. Product management;
8. New system implementations.

Any change to the university’s Information Technology resources will be documented, coordinated, communicated and approved with all stakeholders, as well as adhere to the university’s change management procedures and guidelines. The CIO, IT units, and Change Management Team (CMT) approval will be obtained prior to updating or modifications being made to any IT resource.

Definitions

Information technology resources-are assigned computer accounts, email services, and the shared university network(s), which includes resources, staff and facilities operated by the university, whether owned, leased, used under license or by agreement, including, but not limited to: telephones (including mobile devices) and telephone equipment, voice mail, SMS, desktop laptop computers, mobile devices, hardware, software, networks, computing laboratories, databases, files, information, software licenses, computing-related contracts, network bandwidth, usernames, passwords, documentation, disks, CD-ROMs, DVDs, magnetic tapes, and other electronic media or storage devices. Email, chat, facsimiles, mail, any connection to the university's network(s) or use of any part of the university’s network(s) to access other networks, connections to the Internet that are intended to fulfill information processing and communications functions, communication services, hardware, including printers, scanners, facsimile machines, any off-campus computers and associated equipment provided for the purpose of university work or associated activities.

Change - the addition, modification or removal of anything that could have an effect on IT services or resources.

Procedures/Guidelines

For more information about this policy, contact the IT Department.

Policy updated on: Oct. 24, 2018