The practice of ensuring risks are properly assessed, authorizing changes to proceed, and managing a change schedule in order to maximize the number of successful IT changes.