Change ticket minimum fields for compliance

Published May 8, 2024 • Updated May 1, 2026

Overview

SOC2 auditors sample tickets—missing fields fail controls.

Required fields

Requester, CAB approval (if high risk), backout plan, affected CIs, test plan, maintenance window confirmation.

Automation

PSA workflow blocks closure until filled.

Training

Monthly random ticket audits with feedback—not annual surprise.

Evidence

Export quarterly for customer compliance folder.

Related Articles

EDR deployment checklist for new workstations

## Overview Use this runbook when onboarding a new Windows workstation or re-imaging a device that...

security-endpoint-protection msp +1

Handling Defender for Business false positives

## Overview False positives waste analyst time and train users to ignore alerts. This article stand...

security-endpoint-protection msp +1

Application allowlisting with Windows Defender ASR rules

## Overview Attack Surface Reduction (ASR) rules reduce exploit surface by constraining Office macr...

security-endpoint-protection msp +1