A project team is preparing to deploy a new customer billing module into the organization's production environment. The organization follows ITIL service management practices. Before the deployment can proceed, the operations group insists the change be formally reviewed for risk, scheduling conflicts with other releases, and potential business impact. Which governance body is responsible for authorizing this production change?