The Cyber Security Agency of Singapore (“CSA“) and the Singapore Cyber Emergency Response Team (SingCERT) have published the Effective Information Technology (“IT“) Change Management: A Guide for Organisations (“Guide“). The Guide outlines key strategies and best practices to effectively manage IT changes, covering the fundamentals of IT changes, its management process, importance, and implementation of best practices.
Pursuant to the Guide, organisations implementing IT change management should develop a comprehensive plan encompassing three key phases:
- First phase: scoping, which involves identifying critical assets and defining roles, including system owners and Change Advisory Board members.
- Second phase: developing and establishing resources, standard processes and procedures, and communication strategies.
- Final phase: operationalising the framework through staff training, a gradual rollout across departments, and implementing feedback mechanisms.
The Guide then provides the following best practices for effective IT change management:
- maintaining a comprehensive assets inventory;
- thorough planning, including developing detailed timelines, identifying affected stakeholders, and creating clear communication strategies;
- testing in a controlled environment to verify that changes work as intended and identify potential issues;
- support (such as training) for affected users; and
- post-implementation monitoring to ensure that systems function as expected and changes achieve their intended outcomes.
Click on the following link for more information:
- Effective IT Change Management: A Guide for Organisations (available on the CSA website at csa.gov.sg)
Disclaimer
Rajah & Tann Asia is a network of member firms with local legal practices in Cambodia, Indonesia, Lao PDR, Malaysia, Myanmar, the Philippines, Singapore, Thailand and Vietnam. Our Asian network also includes our regional office in China as well as regional desks focused on Brunei, Japan and South Asia. Member firms are independently constituted and regulated in accordance with relevant local requirements.
The contents of this publication are owned by Rajah & Tann Asia together with each of its member firms and are subject to all relevant protection (including but not limited to copyright protection) under the laws of each of the countries where the member firm operates and, through international treaties, other countries. No part of this publication may be reproduced, licensed, sold, published, transmitted, modified, adapted, publicly displayed, broadcast (including storage in any medium by electronic means whether or not transiently for any purpose save as permitted herein) without the prior written permission of Rajah & Tann Asia or its respective member firms.
Please note also that whilst the information in this publication is correct to the best of our knowledge and belief at the time of writing, it is only intended to provide a general guide to the subject matter and should not be treated as legal advice or a substitute for specific professional advice for any particular course of action as such information may not suit your specific business and operational requirements. You should seek legal advice for your specific situation. In addition, the information in this publication does not create any relationship, whether legally binding or otherwise. Rajah & Tann Asia and its member firms do not accept, and fully disclaim, responsibility for any loss or damage which may result from accessing or relying on the information in this publication.
