Glossary

CAB (Change Advisory Board)

Committee that reviews and approves change requests to minimise risks of system changes according to ITIL principles.

A

B

C

A Change Advisory Board is a governance body composed of representatives from IT, security, operations and business stakeholders who evaluate proposed changes to IT systems and infrastructure. Following ITIL best practices, the CAB assesses the risk, impact and readiness of each change request before granting or denying approval.

The CAB plays a vital role in maintaining system stability and security by preventing poorly planned changes from introducing vulnerabilities or causing outages. In the context of ISO 27001 and SOC 2, a functioning change management process with CAB oversight provides auditors with evidence that changes are controlled, documented and traceable.

D

E

F

G

H

I

J

K

L

M

N

O

P

Q

R

S

T

U

V

W

Z

Frequently asked questions

What is a Change Advisory Board (CAB)?
A Change Advisory Board (CAB) is a group that reviews, assesses and prioritises proposed changes to IT systems and advises on their approval, to minimise the risk of disruption, following ITIL change-management principles.
What does a CAB do?
The CAB assesses each change request for risk, impact and readiness, then recommends whether to approve, reject or schedule it before it goes live.
What is the difference between a CAB and an emergency CAB (ECAB)?
A standard CAB meets on a regular schedule to review planned changes, while an emergency CAB (ECAB) is convened at short notice to approve urgent changes that cannot wait.
← Back to all terms