CAB‑as‑a‑Service (B/S/G)

Security & Continuity MS Managed
Code: SC-MS-CABAAS

Summary. Lightweight change control and risk reduction without the bureaucracy—your pragmatic CAB on call.

Who it's for. SMEs that need predictable, low‑risk change management and simple records for owners/boards.

Business Outcomes

What’s Included

ScopeDescription
Core Inclusions
  • Change logging & scheduling (calendar, backlog triage)
  • Risk assessment, approvals matrix, and decision log (CAB-ready)
  • Post-change review, rollback notes, and exceptions register (owner + expiry)
  • Minutes & action tracking; monthly summary pack
Optional Add‑Ons
  • Emergency CAB outside hours
  • Vendor synchronisation (circuits, SaaS)
  • CAB chair for projects/programmes

Onboarding & Steady‑State

Note: timelines depend on size and current tooling.

PhaseActivitiesDeliverablesIndicative Duration
01 — Setup
  • Agree templates & cadence
  • Define approvals
  • CAB charter & RACI
  • Templates (agenda, minutes, change/decision logs)
  • Cadence & approvals matrix agreed
3–5 days
02 — Operate
  • Run CAB cycles
  • Track actions
  • CAB minutes & action log
  • Exceptions register (owner + expiry)
Ongoing
03 — Improve
  • Review metrics
  • Tighten playbooks
  • Quarterly report (throughput, hit-rate, ageing)
  • Playbook updates
Quarterly

Service Levels (Summary)

PlanCoverageResponse / RestoreGovernance
BronzeBusiness hours (Mon–Fri 08:00–17:00 NZT, except Public Holidays)Std changes in CAB windowMonthly summary
SilverExtended hours (Mon–Fri 07:00–19:00 NZT, except Public Holidays)Std & expedited changesMonthly review
GoldBH + after‑hoursStd/expedited + emergency CABMonthly review + exec summary
For pricing, terms and conditions see the Pricing Annex.

Success criteria (from our perspective)

Prerequisites

Assumptions

Risks & Mitigations

Out of Scope

Get started

Prefer to stabilise first? Run a short pilot to establish a clean baseline; then roll into this managed service.

Related Resources