Company A is purchasing Company B. Company A uses a change management system for all IT processes while Company B does not have one in place. Company B's IT staff needs to purchase a third party…

Question

Options

• APurchase the product and test it in a lab environment before installing it on any live system.
• BAllow Company A and B's IT staff to evaluate the new product prior to purchasing it.
• CPurchase the product and test it on a few systems before installing it throughout the entire company.
• DUse Company A's change management process during the evaluation of the new product.

• A
  3% (1)
• B
  9% (3)
• C
  6% (2)
• D
  82% (28)

Explanation

Since Company A is acquiring Company B and already has an established change management process, the correct next step is to fold Company B's activities into that existing framework immediately. Change management processes exist specifically to evaluate the security impacts of new products and changes before they are introduced into a production environment. Purchasing the product first (A or C) bypasses the formal evaluation process. Allowing joint evaluation without a process (B) is informal and unstructured. Using Company A's change management process (D) ensures the third-party product is vetted through a formal, documented workflow that assesses risk, security impact, and approval gates before any purchasing or deployment decision is made.

No community discussion yet for this question.