A sensitive organization will introduce a new software from test to production environment; what are the major controls/recommendations you should address on following documents:
1. Policy
2. Baseline
3. Checklist
4. Roles definitions & responsibilities
5. Suggested Key Risk Indicator