A Change Advisory Board (CAB) reviews and approves changes. For large organizations, the CAB meets weekly to discuss upcoming changes.
CAB members: Network team lead, security representative, affected application owners, and NOC representative.
What the CAB reviews: Risk assessment, impact analysis, rollback plan, testing evidence, and timing.
Change classifications:
- Standard: Pre-approved, low risk
- Normal: Requires CAB review
- Emergency: Bypasses normal process, reviewed after
Don't let CAB become bureaucracy. The goal is catching mistakes, not blocking progress.