The 12 External Risk Sources Every CAB Should Monitor
The 12 external feeds — CISA KEV, Patch Tuesday, cloud status pages, NVD, and more — a CAB should track before approving changes.
The change-risk desk · Tuesday, July 21, 2026
RSS This Week's Live Risk Signals
Snapshot as of Jul 21Statically pre-rendered at build. The content-management cron refreshes this on a schedule (see roadmap).
- CISA KEVCISA KEV catalog last refreshed
Live feed wiring pending — placeholder card until cron ships.
- MSRCNext Patch Tuesday
Rolling 12-month calendar available in the free tool.
- AWS / Azure / GCP / Cloudflare / GitHubCloud provider status heatmap
Combined status board across the five providers change teams care about.
-
The 12 External Risk Sources Every CAB Should Monitor
The 12 external feeds — CISA KEV, Patch Tuesday, cloud status pages, NVD, and more — a CAB should track before approving changes.
-
The change-window scheduling problem, and how teams actually solve it
Change window scheduling means balancing low-risk timing against staffing and burnout. Here's how CAB teams, tools, and policy actually resolve it.
-
How to Run a CAB Meeting in 2026 (ITIL 4 Guide)
A practical, ITIL 4-aligned guide to running a Change Advisory Board meeting: agenda, roles, metrics, and failure modes to avoid.
-
DORA Change Management Checklist for Resilience Teams
What DORA requires from IT change managers: Articles 9, 12, 17, and 24-27 mapped to a practical CAB checklist, plus a 90-day compliance plan.
-
SOC 2 Change Management Controls and Real Audit Questions
SOC 2 change management under CC8.1, CC7.1, and CC6: what auditors actually ask, what evidence to keep, and where automation falls short.
-
SOX Change Control Checklist Mapped to Your ITSM Workflow
What SOX §404 and ITGC actually require for IT change control, mapped field-by-field to ServiceNow and Jira Service Management tickets.
-
How to Read a CISA KEV Entry and What to Do Next
A field-by-field guide to CISA KEV catalog entries, BOD 22-01 obligations, and a 24-hour runbook for when a new KEV drops.
-
Patch Tuesday: What It Is and How to Plan Around It
Patch Tuesday schedule 2026, MSRC cadence, and a CAB-ready playbook for scheduling change windows around Microsoft's monthly updates.
-
AWS us-east-1 Outage History: A 5-Year Timeline
Every confirmed AWS us-east-1 outage since 2021, sourced from AWS's own post-event summaries, with root causes and what changed.
-
Best Change Management Software for Regulated Industries 2026
10 ITSM vendors compared on FedRAMP, SOC 2, SoD, CAB, and data residency for SOX, HIPAA, PCI DSS, and DORA-scoped buyers.
-
ServiceNow vs Jira Service Management for Change (2026)
ServiceNow vs Jira Service Management change management compared: risk scoring, CAB tools, CMDB vs Assets, pricing, and which fits your org.