T-minus timeline
| When | Activity | Owner | Duration | Dependency | Done |
|---|---|---|---|---|---|
| T-7 days | Final data quality check on source; cleansing complete | Data lead | 2 days | - | |
| T-2 days | Rehearsal in a non-production environment, timed | Platform | 4 hours | Environment ready |
Cutovers fail on the hours either side of the switch, not on the switch itself. A T-minus timeline and written go/no-go criteria are what prevent the decision being made on optimism at two in the morning.
Agree go/no-go criteria days in advance. Write what must be true to proceed while everyone is rested. At 02:00, after weeks of effort, every criterion feels negotiable, which is exactly why they must be fixed beforehand.
Have the business validate, not IT. IT validates that the system responds. Only the business can confirm that an invoice looks right and a report reconciles. Name who performs each validation and ensure they are available.
Define when hypercare ends. Without exit criteria, hypercare either stops too early or never formally ends. Define what must be true (a clean period end, ticket volume back to baseline) before the project team stands down.
Here's a preview. Unlock the free download to get all 4 sections (3 more below).
| When | Activity | Owner | Duration | Dependency | Done |
|---|---|---|---|---|---|
| T-7 days | Final data quality check on source; cleansing complete | Data lead | 2 days | - | |
| T-2 days | Rehearsal in a non-production environment, timed | Platform | 4 hours | Environment ready |
More free templates IT teams use alongside this one.
Rollback plans are written as a formality and discovered to be unusable at 02:00. The only real test is whether a different engineer, without calling the author, could follow it under pressure.
Change control earns its reputation for bureaucracy when every change gets the same paperwork. This form routes by risk: standard changes are pre-approved and need almost nothing, while the genuinely risky ones get the scrutiny that would otherwise be spread thinly across everything.
A CAB reviewing forty changes a week is skimming all of them. The agenda structure here assumes standard changes are pre-approved and absent, leaving time to actually interrogate the few that could cause an outage.
A T-minus timeline with owners and durations, written go/no-go criteria agreed days in advance, technical and business validation steps, a rollback decision point, and a hypercare period with defined exit criteria.
Because at the gate, after weeks of effort and often in the middle of the night, every criterion feels negotiable. Criteria fixed while everyone is rested are the only ones that reliably hold when proceeding is the easier option.
Until defined exit criteria are met rather than for a fixed period: typically a clean first period end, integrations running without failure for a week, and ticket volume returning close to baseline.