unified
UC-SDLC-07 — Approve, test, and accept changes before production release
Evaluate, prioritize, and authorize all IT changes, including emergency changes, before implementation, with documented impact and risk assessment. Establish acceptance criteria, perform acceptance testing in an environment representative of production, obtain business and IT approval, and promote releases through a controlled, auditable transition with fallback plans and post-implementation review.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- domain
- Secure Development (SDLC) & Application Security
- type
- preventive
- category
- administrative
Details
- unified_id
- UC-SDLC-07
- title
- Approve, test, and accept changes before production release
- statement
- Evaluate, prioritize, and authorize all IT changes, including emergency changes, before implementation, with documented impact and risk assessment. Establish acceptance criteria, perform acceptance testing in an environment representative of production, obtain business and IT approval, and promote releases through a controlled, auditable transition with fallback plans and post-implementation review.
- domain
- Secure Development (SDLC) & Application Security
- control_type
- preventive
- control_category
- administrative
- members
- framework
- cobit-2019
- control_id
- BAI06
- coverage
- full
- relationship
- superset_of
- framework
- cobit-2019
- control_id
- BAI07
- coverage
- full
- relationship
- superset_of
- guidance
Source
No record-specific source URL is provided.
Connections
- UC-SDLC-07 — Approve, test, and accept changes before production release mitigates Absent or weak change-control procedures
- strength
- primary
- rationale
- Authorizing, impact-assessing and acceptance-testing every change before implementation directly prevents unapproved/untested changes.
- UC-SDLC-07 — Approve, test, and accept changes before production release mitigates Product design and model errors
- strength
- related
- rationale
- Acceptance criteria and testing against business/IT specifications catch defective designs before release.
- Change Request, Approval & Migration operates UC-SDLC-07 — Approve, test, and accept changes before production release
- Emergency Change operates UC-SDLC-07 — Approve, test, and accept changes before production release
- New System Implementation (SDLC) operates UC-SDLC-07 — Approve, test, and accept changes before production release
- UC-SDLC-07 — Approve, test, and accept changes before production release maps_to BAI06 — Managed IT Changes
- framework
- cobit-2019
- control_id
- BAI06
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- 2019
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-SDLC-07 — Approve, test, and accept changes before production release mitigates Vulnerabilities introduced during software development
- strength
- related
- rationale
- Pre-release acceptance testing catches functional and security defects before production.
- UC-SDLC-07 — Approve, test, and accept changes before production release maps_to BAI07 — Managed IT Change Acceptance and Transitioning
- framework
- cobit-2019
- control_id
- BAI07
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- 2019
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-SDLC-07 — Approve, test, and accept changes before production release mitigates Emergent behaviour and unsafe AI system integration
- strength
- related
- rationale
- Acceptance testing in a production-representative environment catches interface mismatches and integration config errors, but is not the operative defense against emergent, test-unpredictable AI behaviour.
- UC-SDLC-07 — Approve, test, and accept changes before production release mitigates Software and information-system failure
- strength
- primary
- rationale
- Acceptance testing in a production-representative environment plus fallback plans prevent failed releases and release-induced outages.
- SOX ITGC Testing tests UC-SDLC-07 — Approve, test, and accept changes before production release
- Change & Release Management (CAB) operates UC-SDLC-07 — Approve, test, and accept changes before production release
- UC-SDLC-07 — Approve, test, and accept changes before production release mitigates Inadequate vulnerability scanning and pre-release testing
- strength
- related
- rationale
- A mandatory acceptance-test gate prevents inadequately-tested software from reaching production.