1 min lesson
Risk tiers: not every change needs a committee
Give a practical answer to this: "A platform team wants AI agents to merge their own changes to a payments service with no human review, citing speed. Which change tier governs payments and what do you tell them?"
Step 1 of 3
Risk tiers: not every change needs a committee
Mature change management is risk-tiered. Treat a copy fix and a payments-schema migration identically and you get gridlock, recklessness or both. The standard three-tier model:
Interactive diagram. Tab through its regions; each focused region shows its detail in the panel below.
Standard/pre-approved is a light gate where AI velocity pays off; Normal/CAB keeps the full Change Advisory Board gate unchanged; Emergency/break-glass is post-hoc review auditors scrutinize hardest. AI does more work inside each tier - it never removes the tiers.