A software update applied without testing takes your hall of fame display offline during a championship banquet. A layout configuration change pushed directly to production overwrites a live donor wall hours before a fundraising event. A content release with no second approval publishes an incorrect athletic record that parents screenshot and share before anyone notices. Each of these scenarios has the same underlying cause: no formal change management policy governing what can be modified, who must approve it, how it must be tested, and what happens when something goes wrong.
A touchscreen recognition display change management policy defines the categories of change your system can receive, the approval path each category requires, the testing steps that must pass before a change reaches the live display, how changes are documented, and how rollback decisions are made and executed. This guide is written for school IT coordinators, athletic directors, facilities staff, and advancement teams who manage—or are responsible for—a recognition display and want a policy they can adapt and implement this semester.
The short answer: a practical change management policy classifies every update into one of four change types—software updates, configuration changes, content releases, and emergency fixes—assigns each type a required approval level and test checklist, and mandates a written change record before anything reaches the live display. The full framework below gives you the classification table, approval workflows, test checklists, rollback procedure, and a change record template your team can use today.

Why a Formal Policy Is Worth the Effort
Many schools manage recognition display changes informally—an IT coordinator applies platform updates when notified, an athletic director edits a record when a coach emails a correction, and a vendor technician adjusts a display setting during a service visit. This works until it doesn’t.
The failure modes are predictable: an unannounced platform update breaks a custom layout at 7 a.m. on game day; a well-intentioned edit to an inductee profile introduces a factual error that circulates in the alumni newsletter; a vendor configuration change during a service visit modifies sponsorship display logic that took weeks to set up. None of these failures require negligence—they just require the absence of a policy that defines when changes are safe to make, who must know about them, and how they can be undone.
A change management policy protects the display, the staff managing it, and the institution’s credibility with the parents, alumni, athletes, and donors whose names appear on it.
The Four Change Categories
Not every change to a recognition display carries the same risk or requires the same approval process. Classifying changes before you build an approval workflow prevents both under-governance (treating a donor name correction the same way you’d treat a platform version upgrade) and over-governance (requiring a full committee sign-off every time a coach submits a new stat).
| Change Category | Definition | Risk Level | Examples |
|---|---|---|---|
| Software Update | Changes to the underlying display platform, operating system, or CMS version | High | Platform version upgrade, OS security patch, plugin or integration update, driver update |
| Configuration Change | Modifications to display behavior, layout templates, settings, or integrations without changing platform versions | Medium | Layout template edits, display timeout settings, CMS integration credentials, content rotation intervals, ADA display settings |
| Content Release | Addition, modification, archive, or deletion of content displayed to visitors | Low–Medium | New hall of fame inductee profile, donor name update, athletic record correction, sponsor acknowledgment addition, archived class year rotation |
| Emergency Fix | Unplanned change required to restore function or remove incorrect content outside the standard change window | High | Post-publish factual error correction, offensive or unauthorized content removal, display outage recovery requiring configuration restore |
Every change made to a recognition display must be classified before work begins. Classification determines the approval path, the required testing steps, and the documentation standard.
Approval Workflow by Change Category
Software Updates
Software updates carry the highest risk because a platform version change can affect layout rendering, content delivery, integration behavior, and hardware compatibility simultaneously. Any software update that touches the live display requires a staged approval process.
Required approvals: CMS Administrator + IT Coordinator + Content Approver (typically the athletic director or principal designee)
Approval steps:
- The CMS Administrator or vendor notifies the IT Coordinator and Content Approver of the pending update, including the version number, release notes summary, and proposed update window.
- The IT Coordinator reviews release notes for breaking changes to layouts, integrations, or accessibility features and confirms that a tested backup of the current system state exists before proceeding. Schools building backup and restoration readiness into their standard maintenance cycle can treat this step as a scheduled review rather than an ad hoc check.
- The Content Approver confirms that the proposed update window does not conflict with school events, athletic banquets, or donor recognition periods where display downtime would be visible to the public.
- The CMS Administrator applies the update to a staging environment and runs the standard post-update test checklist (see Software Update Test Checklist below) before scheduling the production deployment.
- All three approvers sign the change record before the update is applied to the live display.
Standard update window: Tuesdays or Thursdays, 6:00–8:00 a.m. local time, outside academic calendar blackout dates. Define your blackout calendar at the start of each academic year.
Configuration Changes
Configuration changes modify how the display behaves without changing the underlying platform version. These changes carry medium risk because a misconfigured setting—an incorrect display timeout, a broken content rotation rule, or an ADA contrast ratio adjustment that fails compliance—can affect visitor experience without triggering the kind of hard failure that makes a problem immediately obvious.
Required approvals: CMS Administrator + Content Approver
Approval steps:
- The requestor (any staff member) submits a written change request describing the current setting, the proposed new setting, and the reason for the change.
- The CMS Administrator reviews the request for technical feasibility and documents any dependencies or side effects.
- The Content Approver approves the request in writing, confirming that the change aligns with program goals and does not require additional stakeholder notification.
- The CMS Administrator applies the change to staging, runs the Configuration Change Test Checklist, and documents the test results in the change record.
- Upon test passage, the CMS Administrator applies the change to production and logs the completion.
Schools evaluating how their configuration options compare across platforms should review how recognition platforms handle display quality and software support to understand which settings are standard and which require platform-specific documentation.
Content Releases
Content releases—adding, editing, archiving, or deleting displayed recognition content—are the highest-frequency change type. A well-functioning role-based access control system handles most content releases through the standard submission-review-publish workflow. The change management policy layer adds the testing and documentation requirements that a CMS workflow alone does not guarantee.
Required approvals: Reviewer/Approver + CMS Administrator (for publish action)
Approval steps:
- Content Contributor submits the draft through the CMS workflow.
- The Reviewer/Approver verifies factual accuracy, checks source documentation, and approves the content for publication.
- The CMS Administrator reviews the approved content for display formatting—image aspect ratio, character count limits, layout compatibility—before publishing.
- The CMS Administrator publishes the content and verifies it renders correctly on the live display.
- The change record captures the publish date, the content ID, the approver name, and the live verification confirmation.
Athletic directors managing recognition records and display updates across multiple sports seasons benefit from scheduling content release windows at the start of each season—a defined weekly window for content review and publication prevents ad hoc publish requests that skip the formal checklist.
Emergency Fixes
Emergency fixes address situations where the standard approval window is too slow: content that is factually wrong and already live, a display system that is down during a public event, or content that must be removed immediately for legal or institutional reasons.
Required approvals: CMS Administrator + Content Approver (verbal approval acceptable with written documentation within four hours)
Emergency fix steps:
- The CMS Administrator identifies the issue and notifies the Content Approver immediately, using direct contact (phone call, not email) if the matter is time-sensitive.
- The Content Approver grants verbal authorization for the fix, specifying the scope of the change permitted.
- The CMS Administrator executes the minimum change necessary to address the issue—no additional modifications are permitted under emergency authorization.
- The CMS Administrator logs the change in the audit trail immediately upon completion, noting the issue, the fix applied, the verbal authorization granted, and the authorizing person’s name.
- Within four hours of the fix, the CMS Administrator files a complete change record and the Content Approver provides written sign-off.
- At the next scheduled change review meeting, the emergency fix is reviewed against the standard policy to determine whether a process gap created the incident.

Test Checklists by Change Type
Running a documented test before every production change is the most reliable way to prevent avoidable failures. The checklists below define the minimum verification steps for each change category.
Software Update Test Checklist
Run this checklist on the staging environment before scheduling the production deployment. Document pass/fail for each item.
| Test Item | Pass Criteria | Who Verifies |
|---|---|---|
| Platform version confirmed | Version number matches intended update | CMS Administrator |
| Layout rendering check | All active layout templates render without visual errors on a test display | CMS Administrator |
| Content delivery check | Sample content from each active content type (profiles, records, donors, sponsors) displays correctly | CMS Administrator + Reviewer |
| Navigation function check | All touchscreen navigation gestures function as expected | CMS Administrator |
| Integration connectivity check | CMS-to-display connection and any data integrations return expected responses | IT Coordinator |
| ADA compliance check | Text contrast, font size, and touch target sizes meet WCAG 2.1 AA minimums on updated platform | CMS Administrator |
| QR code function check | Any QR code features scan and resolve correctly | CMS Administrator |
| Rollback readiness confirmation | Backup of pre-update system state is verified accessible and tested restorable | IT Coordinator |
| Performance check | Page load times and content transitions meet pre-update baseline | CMS Administrator |
| Accessibility navigation check | Screen-reader-compatible navigation paths (if applicable) function correctly post-update | IT Coordinator |
A full test cycle on a staging environment should take 30–60 minutes. If the staging environment is not available or cannot replicate the production display accurately, delay the update until the staging issue is resolved.
Configuration Change Test Checklist
| Test Item | Pass Criteria | Who Verifies |
|---|---|---|
| Target setting confirmed | The specific setting has been changed as intended | CMS Administrator |
| Adjacent settings unchanged | Settings adjacent to the changed value match the pre-change baseline | CMS Administrator |
| Display behavior verified | The live display behaves as intended under the new configuration | CMS Administrator |
| No content display errors | All active content still renders correctly under the new configuration | CMS Administrator + Content Reviewer |
| ADA display compliance verified | If display settings were changed, WCAG 2.1 AA compliance is re-confirmed | CMS Administrator |
| Integration behavior verified | If integration settings were changed, the integration performs as expected | IT Coordinator |
Content Release Test Checklist
| Test Item | Pass Criteria | Who Verifies |
|---|---|---|
| Factual accuracy confirmed | Subject name, dates, records, and category are verified against source documentation | Reviewer/Approver |
| Image display verified | Featured image renders at correct aspect ratio without cropping key content | CMS Administrator |
| Character count within limits | Text fields do not exceed CMS display character limits for the template in use | CMS Administrator |
| Layout compatibility confirmed | Content displays without formatting errors in the assigned layout template | CMS Administrator |
| Live verification completed | CMS Administrator has viewed the content on the live display after publishing | CMS Administrator |
Emergency Fix Test Checklist
Because emergency fixes skip the staging step, the post-fix live verification is especially important.
| Test Item | Pass Criteria | Who Verifies |
|---|---|---|
| Issue is resolved | The specific problem that triggered the emergency fix is no longer present on the live display | CMS Administrator |
| No new errors introduced | The fix has not introduced visible errors in adjacent content or layout areas | CMS Administrator |
| Scope of change confirmed | Only the minimum authorized change was applied; no additional modifications were made | CMS Administrator + Content Approver |
| Audit log entry filed | The audit log contains a complete entry for the emergency fix | CMS Administrator |
| Change record filed within four hours | A written change record with approver sign-off exists | CMS Administrator + Content Approver |
Change Record Format
Every approved change must have a change record filed before the change is applied (or immediately after, for emergency fixes). A change record is the institutional proof that a change was authorized, tested, and applied as intended.
Store change records in a shared location accessible to all approvers without CMS login—a shared drive folder, a document management system, or a protected shared document.
Required Change Record Fields
| Field | Description |
|---|---|
| Record ID | Unique sequential identifier (e.g., CHG-2026-0042) |
| Change Type | Software Update / Configuration Change / Content Release / Emergency Fix |
| Change Title | Brief human-readable description (e.g., “Platform update to version 4.2.1” or “Add 2026 Hall of Fame inductee: Martinez, Class of 2026, volleyball”) |
| Requestor | Name, role, and department of the person requesting the change |
| Change Description | What will change, including current state and intended new state |
| Reason | Why the change is being made |
| Proposed Date and Window | Scheduled date, start time, and estimated duration |
| Approver 1 | Name, role, signature or dated written approval |
| Approver 2 | Name, role, signature or dated written approval (where two approvals are required) |
| Test Results | Pass/fail for each item in the applicable test checklist, with date and tester name |
| Applied By | Name of the CMS Administrator who applied the change |
| Applied Date and Time | Exact date and time the change was applied to the live display |
| Live Verification | Confirmation that the CMS Administrator viewed the live display and the change performed as expected |
| Rollback Plan | What will be done if the change must be reversed, and who is authorized to initiate it |
| Related Records | IDs of related audit log entries or previous change records for the same system component |

Rollback Decisions
A rollback reverses a change that has already been applied to the live display and returns the system to a documented prior state. Rollback authority and the rollback procedure should be established in the policy—not decided in the moment when the display is down and the event starts in two hours.
Who Can Authorize a Rollback
| Change Type | Rollback Authorization Required | Initiates Rollback |
|---|---|---|
| Software Update | IT Coordinator + Content Approver | CMS Administrator |
| Configuration Change | Content Approver | CMS Administrator |
| Content Release | Reviewer/Approver | CMS Administrator |
| Emergency Fix | Content Approver (verbal) | CMS Administrator |
A CMS Administrator may not initiate a rollback solely on their own authority except in an active display outage where immediate action is required to restore service. In that case, the same documentation requirements as an emergency fix apply: verbal authorization, immediate log entry, written record within four hours.
Rollback Prerequisites
Before any rollback is executed, the CMS Administrator must confirm that all of the following exist:
- A verified backup of the target prior state is accessible and has been tested restorable. Schools should review their backup and restoration testing procedures before a rollback scenario arrives—an untested backup is not a reliable rollback option.
- The rollback target state does not contain the error or problem that the most recent change was intended to fix.
- Written or verbal authorization from the required approvers is documented.
- An audit log entry is queued to be filed immediately upon rollback completion.
Rollback Procedure
- Stop all in-progress content edits or publish actions before initiating the rollback.
- Notify the Content Approver and any other relevant role holders that a rollback is in progress.
- Apply the rollback to restore the system to the prior documented state.
- Verify that the live display reflects the intended prior state.
- File a complete change record for the rollback (use Emergency Fix format if the rollback was unplanned).
- Document the root cause of the failure that required the rollback and flag it for the next change review meeting.
Change Calendar and Blackout Dates
Timing is as important as testing. A change that would pass every test checklist still creates unnecessary risk if it is applied the morning of a hall of fame induction ceremony or during the week of a major alumni giving campaign.
Establish a change calendar at the start of each academic year that defines:
- Standard change windows: Days and times when routine changes (Configuration Changes, Content Releases) may be applied. Suggested: Tuesday and Thursday mornings before 9:00 a.m.
- Scheduled maintenance windows: Extended windows reserved for Software Updates, typically during winter break, spring break, and summer. Coordinate these with facilities staff who manage access to display hardware locations.
- Blackout dates: Periods during which no changes may be applied to the live display without Content Approver and IT Coordinator co-authorization, regardless of change type. Common blackout dates include: induction ceremony weeks, alumni homecoming weekend, donor recognition event days, championship banquet dates, and the week before school opening each fall.
Schools managing campus directory and recognition display programs that serve multiple audiences—current students, alumni, visiting families, and prospective students—benefit from aligning their change blackout calendar with the admissions visit season, not only the athletic calendar.
Policy Review and Maintenance
A change management policy that is never reviewed becomes shelfware. Build the review process into the policy itself.
Review the policy when any of the following occur:
- A change caused a display outage, a content error, or a rollback.
- A new change type emerges that does not fit the existing four categories.
- The CMS platform is significantly upgraded and prior testing procedures no longer apply.
- A key role owner (IT Coordinator, CMS Administrator, Content Approver) changes.
- At the annual academic year transition in July or August.
Annual policy review steps:
- The CMS Administrator retrieves all change records from the prior academic year and reviews them for patterns: which change types generated the most rollbacks, which test checklist items most frequently surfaced problems, which blackout dates were violated and why.
- The Content Approver reviews the approval workflow for any steps that are consistently skipped or generating bottlenecks.
- The IT Coordinator reviews the test checklists and confirms they still reflect the current platform’s actual behavior.
- The updated policy is signed, dated, filed, and distributed to all role holders before the new academic year begins.
For schools reviewing how their approach to recognition display governance compares with implementations at peer institutions, reviewing how country club recognition programs govern their touchscreen displays provides a useful non-school reference point for where formal change processes deliver measurable operational benefits.

Frequently Asked Questions
Do we need all four change categories if we only do content updates? Yes, even content-only programs benefit from distinguishing Content Releases (routine, planned) from Emergency Fixes (unplanned, time-sensitive). The emergency fix category gives your team a defined procedure for the moments when the standard workflow is too slow—without that definition, every urgent request becomes an informal exception that bypasses testing and documentation entirely.
What if our CMS platform doesn’t have a staging environment? If staging is unavailable, apply a higher-risk standard to all Software Updates: require vendor co-authorization, schedule updates during confirmed low-visibility windows (winter break, spring break), and document a tested rollback path before proceeding. Advocate with your vendor for staging access. Schools evaluating platforms should treat staging environment availability as a key selection criterion when comparing systems.
Who should own the change management policy document? The CMS Administrator holds operational responsibility for executing the policy. The Content Approver (typically the athletic director or a principal designee) holds institutional accountability—they are the person who signs off on the policy annually and authorizes exceptions. Both names should appear on the policy document itself, not just the IT department.
How long should we retain change records? Retain change records for a minimum of seven years, consistent with typical institutional record retention standards. Permanent deletion records, emergency fix records, and rollback records should be retained permanently. Store change records outside the CMS in a system that does not require CMS login to access—if the display is down, you still need to reach your documentation.
What is the difference between an audit trail and a change record? An audit trail (typically CMS-generated) captures every action that occurred: logins, edits, publishes, and role changes. A change record is a pre-authorized, human-completed document that captures the intent, approval, and verification for a specific planned change. Both are required. The audit trail provides the automatic log; the change record provides the institutional authorization that makes the log defensible.
Does this policy apply to vendor-initiated changes? Yes. Any change a vendor technician or platform provider applies to your live display should be treated as a change requiring documentation. Require your vendor to provide advance notice of platform updates (typically available in release notes and vendor communications), confirm the update window with your IT Coordinator, and file a change record for vendor-applied changes just as you would for internally applied ones. See how vendors of different recognition platforms approach software support and updates across platforms to understand what level of advance notice and documentation is standard.
Schools that want to understand how change governance applies across different installation types—kiosk-style, multi-panel, wall-mounted—can find a detailed implementation reference in the country club touchscreen recognition display guide.
Change Management Policy: Implementation Checklist
Before the policy goes live, complete every item in this checklist.
- All four change categories are defined and communicated to every role holder.
- Named approvers are assigned for each change type, with named backups.
- Test checklists for all four change types are printed or stored accessibly in a shared location.
- The change record template is stored in a shared location accessible without CMS login.
- The change calendar for the current academic year is completed, including blackout dates and scheduled maintenance windows.
- Rollback authorization paths and rollback prerequisites are documented and communicated.
- All role holders have read and signed the policy.
- The emergency fix verbal authorization procedure and four-hour documentation requirement are known to all CMS Administrators.
- Change record retention location is designated and accessible.
- Annual review date is calendared for the next academic year transition.
Already managing a recognition display and want to see how a platform built for school governance handles change management? Schedule a free TouchWall demo and walk through software update workflows, CMS role configuration, and audit logging in a live school recognition platform.
Building a Governance-Ready Recognition Program
A change management policy does not replace the day-to-day tools your team uses—the CMS workflow, the role access matrix, the audit trail log—it coordinates them. The policy defines when each tool is required, who must be involved, and what must be documented before a change becomes permanent on a display that visitors, athletes, alumni, and donors interact with by name.
The practical investment is modest: a classification table your team references before starting any change, a test checklist they run before applying it, and a change record they file to document that the right people approved it. The return is a recognition program that can survive a staff transition, defend its records in a parent dispute, and apply a software update without taking the display down during a ceremony.
Start with the classification table and the emergency fix procedure—those two elements address the highest-frequency failure modes. Add the full test checklists and change calendar once the core framework is running. Build the annual review into the academic calendar from the first year, and the policy will improve itself over time.
Ready to build a touchscreen recognition display your school can manage, update, and document with confidence? Rocket Alumni Solutions builds interactive recognition platforms with CMS role management, audit logging, and multi-display support designed for school governance workflows. Schedule a free TouchWall demo and see how your change management policy maps to a live platform.































