PMP Change Advisory Board and Project Governance

PMP® in Action (Part 15): The CAB Showdown – Permission to Fly

Section 1: The “Judgment Day” Calendar Invite

The atmosphere in the 7Pro office was like a NASA control room before a shuttle launch. The European “Smart-Wallet” Go-Live was scheduled for 12:01 AM GMT Saturday. But there was one final, terrifying hurdle: the Global Change Advisory Board (CAB) Meeting.

At 4:00 PM Delhi time, the calendar alert popped up on Kapil Mehta’s screen. The invitees included Tim John (Global Sponsor), Sarah Jenkins (The Auditor), and three senior IT directors from the Canadian and UK banking partners.

“Tariq,” Kapil said, adjusting his tie as if he were walking into a courtroom. “The CAB doesn’t care about our hard work. They only care about Risk. If they see one missing signature in ServiceNow, or if they think our Back-out Plan takes longer than 30 minutes, they will ‘Reject’ the Change Request (CR). We lose the window, and we lose the momentum.”

Mohd Tariq was calmly refreshing the ServiceNow Change record. “I’ve attached the UAT Sign-off from Alistair, the SOAP UI load test results, and the updated KT (Knowledge Transition) Document. I’ve also pre-staged the code on the DR (Disaster Recovery) nodes. We aren’t just ready; we are redundant.”

In the corner, Sunil watched them, his fingers hovering over his keyboard. As the “Documentation Auditor,” he was the one who had to “Validate” the record before the CAB saw it. One small “accidental” deletion of an attachment could trigger a rejection.


Section 1 Breakdown: The PMP & ITIL Lens

  1. Change Advisory Board (CAB): An ITIL concept. A group of people who support the assessment, prioritization, authorization, and scheduling of changes. In PMP, this is the highest level of Perform Integrated Change Control.
  2. Back-out Plan: A documented procedure to return a system to its original state if a change fails. This is a critical Risk Response in IT infrastructure.
  3. Go/No-Go Decision: The formal point where the project team and stakeholders decide whether to proceed with a release.
  4. Governance (PMP): The framework, functions, and processes that guide project activities. The CAB is the “Gatekeeper” of organizational governance.

Section 2: The CAB Inquest – The Missing Link

The WebEx line crackled to life. Six boxes appeared on the screen, representing the “Gods of Governance.” At the center was Sarah Jenkins, the London Auditor, looking more like a prosecutor than a partner.

“Change Request CR-9928,” Sarah announced, her voice echoing in the silent Delhi conference room. “The Europe ‘Smart-Wallet’ deployment. Kapil, I’ve been reviewing the documentation Sunil prepared as your Lead Auditor. While the code logs are present, I don’t see the Rollback Validation for the Frankfurt DR node. Without proof that we can revert Node 2 in under 15 minutes, I cannot recommend approval.”

Kapil’s heart hammered against his ribs. He shot a look at Sunil, who was sitting at the back of the room, staring at his shoes. Sunil had “forgotten” to attach the most critical PDF—the insurance policy for the entire deployment.

“Sarah, that test was completed Tuesday at 4:00 AM,” Mohd Tariq interjected, his voice as smooth as glass despite the adrenaline. “The log exists. If it’s not in the ‘Attachments’ section of the CR, it may be because the ServiceNow sync was interrupted during the night shift transition.”

“An interruption is a failure of process, Tariq,” Sarah countered. “In the UK, we don’t go-live on ‘maybes.’ If the document isn’t in the system, the change is Rejected.”

The silence that followed was heavy. A rejection meant missing the Friday night “Low-Traffic” window. It meant explaining a two-week delay to Tim John. It meant Sunil’s “back-biting” had finally hit the target.


Section 2 Breakdown: The PMP & ITIL Lens

  1. Perform Integrated Change Control (PMP): This process is about reviewing all change requests, approving changes, and managing changes to deliverables. Sarah is exercising her authority to halt the process based on Risk Assessment.
  2. Rollback Validation: A mandatory requirement for any high-risk change. It proves that if “Plan A” fails, “Plan B” (returning to the previous state) is tested and functional.
  3. Conflict Management (PMP): Tariq is attempting to Smooth/Accommodate by providing a technical excuse, but Sarah is Forcing the governance rule.
  4. Service Transition (ITIL 4): The focus here is on Warranty. Does the service work reliably? Without the rollback doc, the “Warranty” cannot be proven.

Section 3: The Digital Fingerprint – The 11th-Hour Save

The CAB meeting was seconds away from a “Decline” status. Sarah Jenkins had her mouse hovered over the rejection button in ServiceNow. But Kapil Mehta didn’t panic; he went into “Audit Mode.”

“Sarah, hold the rejection,” Kapil said, his voice dropping into a deep, authoritative bass. “Sunil, give me your laptop. Now.”

While the Global Directors watched on the WebEx, Kapil didn’t look at the ‘Attachments’ tab. He went deeper. He opened the ServiceNow System Audit Logs—the “Black Box” of the platform that records every single click, delete, and upload attempt.

“Tariq, look at the logs for 11:45 PM last night,” Kapil commanded.

Tariq’s fingers flew across the mechanical keyboard. There it was. An entry in the system log showed that the Rollback PDF had been uploaded, but it was manually “Moved to Draft” and then “Hidden” from the public view by a user with Auditor Permissions.

“The document is in the system, Sarah,” Kapil said, turning his screen to the camera. “It was suppressed. I am restoring the visibility of the Frankfurt Rollback Validation right now. Check your screen.”

The PDF appeared in Sarah’s window. The timestamp proved it was verified 72 hours ago. The “Missing Link” wasn’t a technical failure; it was a human intervention.


Section 3 Breakdown: The PMP & ITIL Lens

  1. System Audit Logs: In ITIL and PMP, this represents the Truth Source. When project data is questioned, the PM must go to the primary record (the OPA) to verify facts.
  2. Ethics and Professional Conduct: This is a major PMP theme. Sunil’s attempt to suppress documentation is a violation of the PMI Code of Ethics (Responsibility, Respect, Fairness, and Honesty).
  3. Technical Resourcefulness: Kapil and Tariq used Data Analysis and Information Management to solve a “Political” problem with “Technical” evidence.
  4. Service Configuration Management (ITIL 4): Ensuring that accurate and reliable information about the configuration of services is available when and where it is needed.

Section 4: The Green Light and the Final “Exit”

The silence on the WebEx line was deafening. Sarah Jenkins studied the audit log on her screen, her eyes flickering over the “Hidden by User” timestamp. She looked back at the camera, her expression shifting from skepticism to a cold, professional realization.

“The evidence is clear,” Sarah said. “The technical requirements are met. The rollback strategy is validated. Tim, from a governance perspective, I am moving CR-9928 to Approved.”

Tim John didn’t waste a second. “Approved on my end. Kapil, Tariq… you have the window. Start the deployment. And Kapil? We’ll discuss that ‘sync interruption’ on Monday.”

As the bridge call disconnected, the “Approved” status on the ServiceNow dashboard turned a glowing, vibrant green. The room erupted into a controlled frenzy—Tariq began the IBM Message Broker node synchronization, and the developers started the XML injection.

Kapil didn’t join the celebration. He walked to the back of the room where Sunil was already standing, his hands shaking.

“Sunil, don’t bother coming in on Monday,” Kapil said, his voice flat and final. “You didn’t just fail as an auditor; you violated the Integrity of the project. I’ve already sent the Audit Log to HR and the Legal team. Your access to the 7Pro network is being revoked… now.”

As the security guard escorted Sunil toward the elevator, Kapil turned back to the main screen. The Europe Go-Live was underway. The “2-2-2” architecture was humming at 100% capacity.


Section 4 Breakdown: The PMP & ITIL Lens

  1. Project Closure (Phase Level): While the project continues, this represents the Closing of a Phase. The lessons learned here regarding internal security and audit trails will be added to the Lessons Learned Repository.
  2. Professional Responsibility: Kapil’s action to remove Sunil is an exercise in Ethical Leadership. Protecting the project from internal threats is as important as protecting it from technical bugs.
  3. Service Validation & Readiness (ITIL 4): The “Approved” status signifies that the service is ready for the Live Environment.
  4. Integrated Change Control: The final approval by the CAB is the completion of the change control process, allowing the Deployment to proceed.

Section 5: Summary – What Did We Learn?

  • The CAB is the Final Judge: Never go into a Change Advisory Board meeting without verifying your own attachments.
  • Audit Logs are Life Rafts: When someone tries to “back-bite” or sabotage a project, the System Logs are the only objective truth.
  • Redundancy isn’t just for Servers: Tariq’s knowledge of the ServiceNow backend was the “Redundant Skill” that saved Kapil when the primary documentation seemed to fail.
  • Zero Tolerance for Sabotage: A PM must be ready to make tough calls to protect the team’s hard work from toxic internal elements.

Leave a Reply

Your email address will not be published. Required fields are marked *