A software company frequently deploys updates to its customer-facing platform. Recently, several changes caused unexpected outages because they were rushed through without proper assessment. The IT director wants to introduce a practice whose primary purpose is to ensure that risks are properly assessed, changes are authorized, and change schedules are managed so that the number of successful changes is maximized. Which ITIL practice should be introduced?