The Short Answer

Scope creep occurs when there is a perceived gap between what was promised and what was actually built. Three mechanisms resolve this: a documented baseline visible to all, a half-page change request form including an effort estimate, and a trade-off rule stating that any addition either displaces something of similar size or consumes a pre-allocated change budget. Without these, every "small request" vanishes into the sprint, only to reappear at the deadline.

Why This Happens Specifically in Salesforce

Salesforce is flexible enough that almost any request appears inexpensive. Adding a field takes two minutes, making it difficult to explain to a stakeholder why it shouldn't be done. However, that field entails validation rules, permissions, a column in a report, mapping in migration, a line in training, and UAT testing. The true cost is five to ten times greater than the build time, and this is precisely the discrepancy no one sees at the time of the request.

Four-Component Control Framework

ComponentWhat it includesWho is responsibleDeliverable
Frozen BaselineList of capabilities, scenarios, and explicit Out of Scope itemsProduct OwnerSigned document at the end of Discovery
Change RequestDescription, business driver, effort estimate, impact on dateRequester + Tech LeadHalf-page form
Change BoardWeekly 30-minute discussion of all open requestsSponsor, PO, Tech LeadDecision: Approved / Rejected / Deferred to next wave
Change Budget10%–20% of the project scope, allocated at project startSponsorWeekly balance tracking

The Power of Explicit Out of Scope

The most crucial section in the Baseline document isn't what's included, but what's explicitly not included. Statements like "Integration to the payroll system is not included in the first wave" or "Migration of activity before 2022 is not included" save weeks of debate. The rule: anything a stakeholder might mistakenly assume is included must appear in the exclusions list by its full name.

How to Say "Yes" Without Paying For It

Blanket rejections lead to projects that finish on time but serve no one. The effective approach is to accept every request into a backlog, price it transparently, and let the stakeholder choose: implement now at the expense of another item, wait for the next wave, or consume from the change budget. When the choice is transparent, the discussion shifts from emotional to economic—and in practice, about a third of requests drop off once the cost is revealed.

Further details on defining the Baseline are available in Defining Your MVP for Salesforce and The Ultimate CRM Discovery Guide.

Common Risks and Preventive Actions

The main risk is overly heavy control. A process requiring three forms and two weeks of waiting causes teams to circumvent it—and changes continue, just without documentation. A half-page form and a weekly discussion are the practical ceiling.

A second risk is technical creep: architectural decisions made within a sprint that expand the scope without anyone calling it a change. Therefore, any significant architectural change must also go through the same change board. A third risk is an absent Sponsor: when there's no one with authority to say "no," every request gets a "we'll look into it"—which is equivalent to a "yes."

How to Measure Success

Track four numbers in a weekly report: number of requests opened, percentage approved, cumulative change in project scope versus the Baseline, and remaining change budget. A healthy project shows a cumulative change of up to 15% and a positive budget balance during the UAT phase. Cumulative change above 30% indicates that the Discovery phase was too superficial, not that the team is undisciplined.