24 NCAC 06B .0404          Change Management Processes

(a)  The Operator shall submit change management processes to the Director for approval. Documented change management processes shall describe evaluation procedures for identifying the criticality of updates and determining the updates that the Operator shall submit to an Independent Testing Laboratory for review and certification. These change management processes shall be:

(1)           developed in accordance with the GLI-CMP Guide;

(2)           approved by the Commission prior to their deployment; and

(3)           audited at an annual interval by an Independent Testing Laboratory.

(b)  The Operator shall submit quarterly change reports to the Independent Testing Laboratory for review to ensure risk is being assessed according to the change management processes and that documentation for changes is complete.

(c)  At least once annually, the Operator shall have their products operating under the approved change management processes evaluated by an Independent Testing Laboratory. In order for the Operator to continue to offer the products as described above, the Operator's products shall be fully certified to the specifications set forth in these Rules and other technical specifications as prescribed by the Commission or Director and with formal certification documentation from the Independent Testing Laboratory. For good cause, the Operator shall be allowed to seek approval for extension beyond the annual approval if hardship is demonstrated. Whether to grant a hardship extension is in the sole discretion of the Director.

History Note:        Authority G.S. 18C-114(a)(14);

Previously adopted as Rule 2D-004;

Eff. January 8, 2024;

Readopted Eff. March 27, 2024.