Procedure
Release Management Procedure
This procedure governs the release of software, configuration, and infrastructure changes to production. It complements the change management procedure (which authorizes the change) and the secure code review procedure (which validates the artefact) by governing how changes move from acceptance to live operation safely, predictably, and reversibly.
- Type
- Procedure
- Version
- 1.0.14
- Date
- 2026-11-05
- Owner
- Chief Information Officer
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- IT Operations
- Review frequency
- Annual and upon material change to deployment platform, regulatory expectations, or release cadence
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- Purpose
- Scope
- Procedure
- Release classes
- Roles
- Coordination with other procedures
- Tooling expectations
- Operating expectations
- Framework alignment
- Limitations
Frameworks it maps to
- ITIL 4
- ISO/IEC 20000-1:2018
- ISO/IEC 27001:2022
- NIST SP 800-218 Version 1.1
- OWASP SAMM
- Google SRE
- DORA (DevOps Research and Assessment) accelerate metrics
Related documents
- IT Service Management Frameworkoperations
- Change Management and Configuration Control Procedureoperations
- Site Reliability Engineering Standardoperations
- Observability and Telemetry Standardoperations
- Patch Management Procedureoperations
- DevOps Security Requirementsdev-security
- Secure Code Review Proceduredev-security
- Acceptance Into Service Policysecurity
Next
All Documents