A method of evaluating change risk in an IT environment, including collecting environment state snapshots of configuration parameters in the IT environment, invoking a manifest of a change on the environment state snapshots to form simulated environment state snapshots, analyzing the simulated environment state snapshots relative to the environment state snapshots, deriving a risk score based on the analysis and selectively perform the change responsive to the risk score.