CUST-11 Release notifications

What is CUST-11 release notification control?

Release notification control: Following the deployment of major features, it is vital to notify the internal and external stakeholders of the feature deployment. There is no right or wrong way to provide the notification. Typically, this will be done via the website or via email.

Note: The email option involves a statistical sampling from the auditor (i.e., for X numbers of customers, provide the email that was sent).

Available tools in the marketplace

Tools:

There are no tool recommendations for this section

Available templates

TrustCloud has a curated list of templates, internally or externally sourced, to help you get started. Click on the link for a downloadable version:

• Release Notification on the TrustCloud website

Control implementation

To implement this control,

1. Implement a process to track every major feature release.
2. Implement a process to share the release information internally via internal sharing tools.
3. Implement a process to share the release information externally with all customers (via email or via the website).

What evidence do auditors look for?

Most auditors, at a minimum, are looking for the below-suggested action:

1. Provide a screenshot of external release notes via email or website.

Evidence example

For the suggested action, an example is provided below:

1. Provide a screenshot of the external release notes via email or website.
   The following screenshot shows an example of an email notification. Ensure to show the recipients.
   
   Here is a TrustCloud release note example.