CISA · Question #115
Which of the following BEST ensures that effective change management is in place in an IS environment?
The correct answer is D. Access to production source and object programs is well controlled. Effective change management is best ensured by tightly controlling access to production source and object programs, preventing unauthorized modifications that bypass formal change processes.
Question
Which of the following BEST ensures that effective change management is in place in an IS environment?
Options
- AAdequate testing was carried out by the development team.
- BUser-prepared detailed test criteria for acceptance testing of the software.
- CUser authorization procedures for application access are well established.
- DAccess to production source and object programs is well controlled.
How the community answered
(67 responses)- A24% (16)
- B12% (8)
- C6% (4)
- D58% (39)
Why each option
Effective change management is best ensured by tightly controlling access to production source and object programs, preventing unauthorized modifications that bypass formal change processes.
Adequate testing by the development team is a part of the change process but doesn't ensure overall effective change management, as unauthorized changes could still bypass this.
User-prepared detailed test criteria for acceptance testing is important for quality but relates more to the testing phase of a change rather than the overarching control of the change process itself.
User authorization procedures for application access are a component of access control, not directly related to ensuring that system changes are managed effectively.
Well-controlled access to production source and object programs is critical because it directly prevents unauthorized or undocumented changes from being introduced into the live environment. This control ensures that all modifications follow the formal change management process, including review, testing, and approval, thereby maintaining system integrity and stability.
Concept tested: Key controls in change management
Source: https://www.isaca.org/resources/isaca-journal/issues/2012/volume-4/a-review-of-change-management-best-practices
Topics
Community Discussion
No community discussion yet for this question.