At my previous employer we had a paper system that worked pretty neatly. The MOC process is supposed to be a funnel, first nothing should bypass it, then all you have to get right is the inputs and outputs.
Nothing should bypass it = have a very clear definition of what a change is and write it...