When to use this
Use this checklist before installing software on operational systems where failure could affect confidentiality, integrity, availability, or business service.
Related controls
- A.8.19 Installation of Software on Operational Systems
- A.8.13 Information Backup
- A.8.14 Redundancy of Information Processing Facilities
Rollback checklist
- Current version identified.
- Current configuration backed up.
- Required data backup completed.
- Previous software artifact is available.
- Rollback steps documented.
- Rollback owner assigned.
- Rollback decision criteria defined.
- Maximum acceptable outage considered.
- Dependencies and integrations checked.
- Rollback tested or reviewed where practical.
Rollback record
| Change ID | System | Backup evidence | Previous version available? | Rollback owner | Criteria | Result |
|---|---|---|---|---|---|---|
| TBD | TBD | TBD | Yes/No | TBD | TBD | TBD |
- Template
- Iso27001
- Technological controls
- Rollback
Note Metadata
Aliases: Software Fallback Checklist
Source: 90 Templates/Software Rollback and Fallback Checklist.md
Related Notes
- A.8.19 Audit Evidence Pack
- ISO 27001 A.8.13 - Information Backup
- ISO 27001 A.8.14 - Redundancy of Information Processing Facilities
- ISO 27001 A.8.19 - Installation of Software on Operational Systems
- A.8 Technological Controls MOC
- A.8 Technological Controls Implementation Guide
- A.8 Technological Controls Audit Guide
- A.8 Technological Controls Implementation Audit Risk Mapping
- A.8.19 Audit Checklist
- Operational Software Release and Installation Record
- Templates MOC