Allow Users to Request Applications

Change is inevitable and you need to manage evolving user and business needs. In addition to creating a reactive escalation process for addressing blocked applications, you also need to implement a more proactive process for introducing change. Decide how much flexibility to provide and how you'll approach balancing security with flexibility across the organization. As an IT administrator, your goal is to enable (rather than inhibit) business.

After you've defined the change control process, communicate it to your users so that they understand how to request approval for new or blocked applications ahead of time.

See Appendix 2 for sample end user communications.