If it is just JBOSS follow JBOSS instructions, that is a third party component not under control by SAS institute
You should follow normal release management procedures in this case for infrastructure components.
That is test and verify your change in a infra-test machine. Verify the change by applying this into the business developers environment (your infra production)
When these guys are happy proceed with the business user-acceptance to get approval from them and than do the business productions (less critical to critical ones)
---->-- ja karman --<-----