Engineers want to push emergency firewall changes to a city data center with no ticket, approval, or backout plan because “it is faster.” Which governance response is correct?
Select an answer to reveal the explanation.
Short Explanation
Change management is not red tape for its own sake—it is the city’s policy that risky firewall edits get approval, impact thought, and a backout path. “Faster” undocumented pushes are how outages and holes sneak in. Emoji retrospectives are not a change record.
Full Explanation
Change-management policy mandates structured processes—requests, impact analysis, approvals, scheduling, and backout—rather than ad hoc production changes. Governance links this policy area to operational change practices so security and availability risks are considered. Verbal-only or emoji-based substitutions fail auditability and increase the chance of harmful or untracked firewall modifications.