Propose, test, approve and evidence a change to a live control: current vs proposed, supporting data, operational impact, an approver's decision, a monitoring plan and a rollback path.