Discussion
Open question
- Posts
Technical checks can pass while business readiness is still weak. Who should decide whether to launch?
Accepted answerThe accountable business owner should make the decision based on signed evidence from technical, data, security, privacy, accessibility, support, and operational leads. Define pass criteria, accepted residual risks, rollback conditions, support coverage, and the authority to stop the launch. The vendor can report readiness but should not approve the buyer’s operational risk. FAR Part 46 separates quality evidence from acceptance responsibility.
Community replyShould a single unresolved high-risk security issue always block go-live, or can it be accepted with conditions?
- You must be logged in to reply to this topic.