EF-010 — Enterprise Governance
Document ID: EFType: StandardStatus: DraftOwner: Cloudberrie StudioVersion: 1.0Updated: 2026-07-17
Governance Principles
- Material changes have a named owner and approver.
- Critical systems have primary and backup owners.
- Changes to DNS, identity, production data, billing, and client access are documented.
- Documentation is reviewed on a defined cadence.
- Exceptions are time-bound and recorded.
Change Categories
| Category | Examples | Control |
|---|---|---|
| Standard | Content update, non-production visual correction | Owner review |
| Elevated | New vendor, new integration, permissions change | Functional + business owner |
| Critical | DNS, domain transfer, production security rules, billing owner, data migration | Technical + executive approval and rollback plan |
Review Cadence
| Tier 1 access | Quarterly and after personnel/role changes |
| Vendor billing | Monthly review; annual renewal review |
| DNS and domain estate | Quarterly and before every migration |
| Manual documents | At least annually; high-change runbooks quarterly |
| Production backups and recovery | Quarterly test or product-specific schedule |
Definition of Done
Owner and approver identified Security and privacy considered Test/validation completed Rollback documented where needed Manual updated Asset/vendor/register updated