Change Advisory Board

The CAB is a cross-functional group that provides advice and authorisation for changes to IT services. Members typically include IT managers, technical specialists, business representatives, and security officers. Not all changes require CAB review — standard changes are pre-authorised, and emergency changes may be authorised by a smaller Emergency CAB (ECAB). Normal changes are assessed by the CAB based on risk, impact, resource requirements, and scheduling. Modern approaches are moving toward peer review models and automated risk assessment, reducing reliance on formal CAB meetings while maintaining governance.