All courses · Volume 4

Change Management: Testing the Path to Production

Change types, CI/CD pipelines, emergency fixes and direct access to production, and how to test them from a complete population.

See the packsWhat's inside
19slides with notes
2Excel exercises
2026standards

What you will be able to do

Learning outcomes

  • Explain why change management underpins reliance on automated controls
  • Distinguish standard, normal and emergency changes and the controls each needs
  • Identify where controls live in a CI/CD pipeline and what evidence they leave
  • Build a complete population of changes from the system, not the ticket tool
  • Test direct access to production, configuration changes and vendor releases

Part 1: How change works in 2026

Not every change needs the same control · The path to production · In a pipeline, the controls move into the tooling · Developers should not deploy their own code · When the vendor changes your system

Part 2: Testing change

The most important step: a complete list of changes · Testing change management · Fast is fine. Unreviewed is not. · Who can change production outside the process? · Not every change is code · Six ways change testing goes wrong

Worked example

A synthetic audit finding on production changes made outside the process, plus a four-question knowledge check with suggested answers.

19-slide course deck

Every slide has full speaker notes, a worked audit finding, a knowledge check and current sources.

Participant workbook

Notes pages, a finding template, a 10-question knowledge check and a glossary.

Excel exercises

Match 60 production deployments to approved changes. Test who can change production. All data is fictional.

Pricing

Choose your pack

Learner Pack

£29 one-off

For self-study and auditors building their skills.

  • Course deck (PDF, 19 slides)
  • Participant workbook
  • Excel exercise file
  • Single-user licence
Buy the Learner Pack

Secure checkout by Stripe. Files are emailed within one working day. Want all six courses? See the ITGC Complete bundle.