CUST-11 Release notification

What is this control about?

Release notification control – Following the deployment of major features, it is vital to notify the internal stakeholders and external stakeholders of the feature deployment. There is no right or wrong way to provide the notification. Typically, this will be done via the website or via email.

Note: The email option will involve a statistical sampling from the auditor (i.e for X numbers of customers, provide the email that was sent).

Available tools in the marketplace

Available templates

TrustCloud has a curated list of templates internally or externally sourced to help you get started. Click on the link for a downloadable version:

• Release Notification on the TrustCloud website example

Control implementation

Implement a process to track every major feature releases.

Implement a process to share the release information internally via internal sharing tools

Implement a process to share the release information externally to all customers (via email or via the website)

What evidence do auditors look for?

Most auditors, at a minimum are looking for the below suggested action:

• Provide a screenshot of external release notes whether via email or website.

Evidence example

From the suggested action above, an example is provided below.

1. Provide a screenshot of external release notes whether via email or website.

Example of an email notification. Ensure yours shows the recipients

TrustCloud release notes example