CUST-11 Release notifications

What is CUST-11 release notification control?

One of the many controls, CUST-11 release notification control, allows organizations to manage and control the release of updates or new versions of their products or services to their customers. This control ensures that customers are informed about any changes or updates that may affect their usage or experience.

With CUST-11 release notification control, organizations can send out notifications to their customers, providing them with information about the upcoming release, including details about new features, bug fixes, or any other relevant information. CUST-11 control helps organizations maintain transparency and effectively communicate with their customers, ensuring a smooth transition to the new release.

Following the deployment of major features, it is vital to notify the internal and external stakeholders of the feature deployment. There is no right or wrong way to provide the notification. Typically, this will be done via the website or via email.

Note: The email option involves a statistical sampling from the auditor (i.e., for X numbers of customers, provide the email that was sent).

Read our Change Management Policy article to learn more.

Available tools in the marketplace

Available templates

TrustCloud has a curated list of templates, internally or externally sourced, to help you get started. Click on the link for a downloadable version:

• Release Notification on the TrustCloud website

Control implementation

To implement CUST-11 control,

1. Implement a process to track every major feature release.
2. Implement a process to share the release information internally via internal sharing tools.
3. Implement a process to share the release information externally with all customers (via email or via the website).

What evidence do auditors look for?

Most auditors, at a minimum, are looking for the below-suggested action:

1. Provide a screenshot of external release notes via email or website.

Evidence example

For the suggested action, an example is provided below:

Provide a screenshot of the external release notes via email or website.
The following screenshot shows an example of an email notification. Ensure to show the recipients.

Here is a TrustCloud release note example.

Have a question? Join our TrustCommunity to learn about security, privacy, governance, risk and compliance, collaborate with your peers, and share and review the trust posture of companies that value trust and transparency!