Adrian,

Oh yes, managing changes to the rules is just like managing change to code. The companies I have mentioned use a full testing and controlled implementation process to avoid bugs/problems. Rules management has actually been around a while, especially in the credit business, for calculating your credit score. Risk analysts routinely adjust their rule sets, analyze credit histories, and then implement changes as needed.

Certainly the introduction of rules may come out of IT in most companies, but it cant stay there, rules belong to the business.