People implement changes before approval. How do we regain control?

Unauthorized baseline change

Make the decision boundary clear and investigate why teams bypass it. Capture the actual change, assess its consequences, and obtain a legitimate resolution without fabricating prior approval.

What to do now

  1. Identify what changed and when
  2. Assess impact on scope, cost, risk, and evidence
  3. Route the current situation to the authorized decision-maker
  4. Update controls and the approved plan
Recommended action flow for unauthorized baseline change: Identify what changed and when then Assess impact on scope, cost, risk, and evidence then Route the current situation to the authorized decision-maker then Update controls and the approved plan. Escalate when the unauthorized change creates material harm or exceeds delegated authority.

When to escalate

Escalate when

The unauthorized change creates material harm or exceeds delegated authority.

Who decides

The authorized change decision maker

Example

A configuration change is reviewed after discovery, with its actual timing and corrective actions preserved.

Mistake to avoid

Backdating approval to make the change appear compliant.

Prevent a repeat

Compare delivered changes with authorized decisions and keep the current baseline distinguishable from earlier versions.

Suggested ApprovedFlow setup

  • Documents
  • Approvals
  • Tasks

Keep the change request, impact assessment and recorded decision together; update affected tasks only after the appropriate authorization. See the platform

Related cases

Practice references