Aarum Technologies · Release Change Governance

Your Grid Is
Getting Smarter.
Is Your Release
Process?

Every software change to your energy management, distribution, metering, and billing systems carries consequence. nexusRCG brings structure, intelligence, and governance to every release — before anything reaches production.

nexusRCG — Operations Dashboard
2
Deploying Now
97%
30d Stability
1
Scheduled
0%
Backout Rate
🔥 Generation 🔌 Transmission 🏘 Distribution 💳 Billing 🎧 Customer Care
EMS Upgrade — Generation Deploying
ADMS Patch — Distribution Approved
CIS Upgrade — Customer Care ORB Review

Aarum Technologies

"nexusRCG was not built in a lab. It was built from inputs from people who spent years inside electric utility operations — coordinating releases, managing deployments, and living the consequences when things went wrong. We built it because we could not find anything built for our world."

The call at 2am when the deployment went wrong.
The morning a team discovered their release had broken three systems nobody told them about.
The deployment that went live during a storm — because nobody told the Operations Control Room it was happening.
The outage nobody saw coming because two teams scheduled changes in the same window and never spoke.
The audit where the evidence was not there — because the records were never kept.
The failure that happened again — because nobody captured what went wrong the first time.
The release that triggered a NERC CIP obligation nobody knew about — because compliance was never part of the change process.
Every one of these happened
because of a planned change.

Not a cyber attack. Not a hardware failure. A scheduled deployment — managed with tools that were never built for this environment.

Energy Management System
Saturday night. EMS upgrade. Nobody checked the blast radius.

It is 11pm on a Saturday. Your team has been planning this Energy Management System upgrade for six weeks. Everyone signed off in the meeting. The implementation document is ready.

What nobody checked — whether the Operations Control Room was actually notified. Whether the rollback steps had ever been tested. Whether anyone knew which downstream systems would be affected if something went wrong.

At 2am something goes wrong. Generation dispatch starts behaving unexpectedly. Your team is scrambling through a Word document trying to find the rollback steps. The Control Room is asking questions nobody can answer.

The rollback takes four hours instead of forty minutes. Three months later — a similar patch. The same Saturday night. The same things go wrong. Because nobody captured what happened the first time.

No blast radius mapping Rollback never tested Control Room not notified Nothing captured
🏘
Advanced Distribution Management
ADMS goes live. Three integrations break. Nobody mapped them.

Your Advanced Distribution Management System upgrade has been in planning for months. Vendor is on site. Change window is confirmed. The team is ready.

What nobody realised until deployment night — the ADMS connects to your Outage Management System, which connects to your IVR platform, which is what your customers call when their power goes out. A chain of three integrations. None of them mapped. None of their teams notified.

The ADMS upgrade goes well. But the OMS starts showing stale data. The IVR starts giving customers incorrect outage information. Your customer service team is fielding calls they cannot answer. The ADMS team had no idea. Nobody showed them the map.

No dependency mapping No cross-team notification Blast radius unknown
📡
Metering Infrastructure
AMI head-end upgrade runs long. 40,000 customers get estimated bills.

Your AMI head-end server upgrade has been on the roadmap for a year. Hundreds of thousands of endpoints. The upgrade window is booked.

Nobody asked — what happens to meter reads during the upgrade window? What happens to billing if reads are delayed? What is the plan if the upgrade needs to be rolled back halfway through?

The upgrade runs longer than planned. Meter reads for 40,000 customers are missed. Billing runs the following week using estimated reads. Customers start calling. Your billing team is managing the fallout. Your AMI team has moved on to the next project.

No readiness checklist No billing impact assessment No rollback plan
💳
Billing System
Go-live date was kept. System was not ready. Six months of corrections followed.

Your Customer Information System upgrade has been live for two weeks. The project team is celebrating. The vendor has packed up and gone home.

But your customer service team is drowning. Bills are going out with incorrect amounts. Some customers are getting two bills in the same week. The edge cases — solar net-metering customers, payment plans, budget billing arrangements — nobody tested those.

Your billing manager knew there were gaps before go-live. But there was no formal process to raise a blocker. No checklist that said — these scenarios must be tested and signed off before we cut over. The date was in the calendar. The date was kept. Six months of manual corrections follow.

No Go/No-Go governance No mandatory readiness checklist No way to raise a blocker
🗺
Outage Management System
Routine OMS patch. Major storm the next day. Nobody connected the two.

A routine software patch to your Outage Management System. Low risk. Quick deployment. In and out in two hours on a Tuesday night.

What nobody considered — a major storm was forecast for Wednesday. Your OMS feeds your field crew dispatch system. It feeds your customer outage portal. It feeds the IVR your customers call when their lights go out.

The patch introduced a latency issue. Minor in normal conditions. Catastrophic during a storm event with 40,000 customers off supply. Field crews were getting delayed dispatch. The customer portal was showing incorrect restoration times. The patch had been planned for two weeks. The storm forecast had been available for five days. Nobody connected the two.

No release calendar No freeze window awareness No downstream impact check
🔗
Multiple Integrations — Same Window
Three releases. Three teams. Zero coordination. All in production before anyone noticed.

Three releases in the same two-week window. An ERP upgrade in billing. A meter data management system patch. A new API between your customer portal and your CIS. Each team planned independently. Each tested in isolation.

The ERP upgrade changed how billing data was formatted. The MDMS patch changed how meter reads were timestamped. The new portal API expected the old formats from both. None of the three teams knew what the others were doing. No shared calendar. No conflict check. No cross-team visibility.

By the time the conflict was discovered — all three were already in production.

No shared release calendar No conflict detection No cross-team visibility
🛡
Regulatory Compliance
The change went perfectly. The violation was discovered six months later.

A firmware update to a substation automation system. Routine to the team. Low priority in the change board. Completed on a Thursday night with no special governance.

What nobody checked — that system was a classified BES Cyber Asset. The change required NERC CIP authorisation documentation before it touched production. The work was done by experienced engineers who knew the system well. But the compliance obligation was never part of the change workflow.

The change itself went perfectly. The violation was discovered six months later. The penalty exposure was significant — not because of what was done, but because of what was not documented.

No compliance detection No NERC CIP authorisation No documentation at point of change

Every one of these scenarios has a root cause.
And every root cause has a solution.

nexusRCG
for utilities
Every scenario above has a root cause.
nexusRCG addresses each one.

A release change governance platform built for the complexity of electric utility operations — OT and IT, compliance and risk, governance and intelligence. Six capabilities. One connected platform.

01 · RISK
🧠
Risk Intelligence Engine
Every release is automatically scored across six weighted factors — domain criticality, application and integration criticality, environment, compliance exposure, outage impact, and downstream blast radius. High-risk releases route directly to your Operations Release Board.
Automated Consistent OT-aware
02 · GOVERNANCE
🏛
Operations Release Board
Traditional change boards were designed for general IT. The Operations Release Board is purpose-built for utility operations — risk-driven routing means only the right releases reach the board. Every approval, deferral, and rejection is recorded digitally with a complete audit trail.
Risk-driven Digital Auditable
03 · CHECKLISTS
Governance Checklists
Pre-deployment readiness, Go/No-Go decisions, and post-deployment reviews form one single connected governance trail — enforced, recorded, and fully auditable from first submission to closure. Nothing informal. Nothing missed. Nothing repeated.
Enforced Connected Complete
04 · VISIBILITY
🔗
Application Dependency Map
No complex asset database required. nexusRCG works with just your domain structure, application names, and integration names. A lightweight registry your team can maintain — showing the full downstream blast radius of every change before it reaches production.
No CMDB needed Cross-domain Blast radius
05 · CALENDAR
📅
Release Calendar
A live calendar showing every scheduled release, every domain, every freeze window, and every potential conflict — across your entire OT and IT landscape. Two teams will never again schedule conflicting releases without knowing.
Unified Conflict-aware Live
06 · COMPLIANCE
🛡
Compliance Built In
NERC CIP, IEC 62443, FERC, SOX, and PCI DSS obligations are automatically detected from your application registry and embedded into every step of the change process — not checked after the fact during an audit.
Auto-detected Embedded Evidence-ready
📜
Immutable Audit Trail
Every release action recorded permanently — every decision, every checklist, every approval. Pre-deployment checklists, board decisions, Go/No-Go confirmations, and post-deployment reviews. Your complete release history, always ready for regulators, auditors, or your own team. Not assembled after the fact — captured automatically at every step.
Permanent Automatic Audit-ready
💡

nexusRCG fills the gap.

nexusRCG fills the gap your current process was never designed to address — utility-specific release governance, compliance awareness, and operational risk intelligence in one place.

From first submission to closure.
Every step. Every time.

Four stages. Eight lifecycle states. One unbroken governance trail.

🧠
01 · Submit
Risk Assessment
Release submitted. Six-factor risk score calculated automatically. Compliance flags detected. ORB routing determined — no manual triage.
🏛
02 · Govern
Board Review
High-risk releases go to the Operations Release Board. Pre-approval governance checklist enforced. Every decision recorded with full audit trail.
🚀
03 · Deploy
Go / No-Go
Structured Go/No-Go decision gate. Readiness confirmed. Deployment window locked. Applications tracked individually through to completion.
📊
04 · Learn
Post-Deployment
Mandatory post-deployment review. Stability score calculated. Lessons captured. Intelligence built so every future release is better than the last.
Two minutes. The full picture.

From risk scoring and Operations Release Board governance to the release calendar and deployment intelligence — everything in one walkthrough.

Platform walkthrough — coming soon
Configurable to Your Environment
Risk factor weights Adjustable
ORB routing threshold Configurable
Compliance frameworks Selectable
Operational domains Customisable
Freeze windows Your schedule
Application registry Click to load
Code required None

We build for the people keeping the grid running.

Aarum Technologies was founded on one belief — that critical industries deserve software built specifically for them. Not adapted from tools designed for a different world. Not bolted on top of platforms that were never meant for operational technology environments.

Our first product, nexusRCG, was shaped by direct experience inside electric utility operations. The late nights. The audit scrambles. The deployments that went sideways. The integrations nobody mapped. We built what we could not find.

We are a small team. We are adding the governance layer that utility release operations has always needed — and never had.

Start a Conversation →
Tell us your biggest
release challenge.

We are not here to pitch. We are looking for utility technology leaders willing to tell us whether nexusRCG addresses challenges they actually face — and share their honest thoughts. No commitment. No pressure.

"Because the grid that powers the world
deserves better than a spreadsheet."
nexusRCG for utilities · Aarum Technologies · 2026