CAS-005 · Question #200
During an audit at an organization, auditors find that developers are able to promote code to production. The auditors request a full review of all production changes. Which of the following should th
The correct answer is D. Change control board. A Change Control Board (CCB) enforces structured review and approval processes for changes before they reach production. Implementing a CCB ensures that all production changes are formally reviewed, preventing audit issues in the future.
Question
During an audit at an organization, auditors find that developers are able to promote code to production. The auditors request a full review of all production changes. Which of the following should the organization implement to prevent a full review in the future?
Options
- ABranch protection
- BCentralized code repositories
- CInteractive application security testing
- DChange control board
How the community answered
(32 responses)- A3% (1)
- B3% (1)
- C13% (4)
- D81% (26)
Explanation
A Change Control Board (CCB) enforces structured review and approval processes for changes before they reach production. Implementing a CCB ensures that all production changes are formally reviewed, preventing audit issues in the future.
Community Discussion
No community discussion yet for this question.