nerdexam
Isaca

CISA · Question #115

Which of the following BEST ensures that effective change management is in place in an IS environment?

The correct answer is D. Access to production source and object programs is well controlled. Effective change management is best ensured by tightly controlling access to production source and object programs, preventing unauthorized modifications that bypass formal change processes.

Submitted by hans_de· Apr 18, 2026Information Systems Operations and Business Resilience

Question

Which of the following BEST ensures that effective change management is in place in an IS environment?

Options

  • AAdequate testing was carried out by the development team.
  • BUser-prepared detailed test criteria for acceptance testing of the software.
  • CUser authorization procedures for application access are well established.
  • DAccess to production source and object programs is well controlled.

How the community answered

(67 responses)
  • A
    24% (16)
  • B
    12% (8)
  • C
    6% (4)
  • D
    58% (39)

Why each option

Effective change management is best ensured by tightly controlling access to production source and object programs, preventing unauthorized modifications that bypass formal change processes.

AAdequate testing was carried out by the development team.

Adequate testing by the development team is a part of the change process but doesn't ensure overall effective change management, as unauthorized changes could still bypass this.

BUser-prepared detailed test criteria for acceptance testing of the software.

User-prepared detailed test criteria for acceptance testing is important for quality but relates more to the testing phase of a change rather than the overarching control of the change process itself.

CUser authorization procedures for application access are well established.

User authorization procedures for application access are a component of access control, not directly related to ensuring that system changes are managed effectively.

DAccess to production source and object programs is well controlled.Correct

Well-controlled access to production source and object programs is critical because it directly prevents unauthorized or undocumented changes from being introduced into the live environment. This control ensures that all modifications follow the formal change management process, including review, testing, and approval, thereby maintaining system integrity and stability.

Concept tested: Key controls in change management

Source: https://www.isaca.org/resources/isaca-journal/issues/2012/volume-4/a-review-of-change-management-best-practices

Topics

#Change Management#Production Controls#Source Code Control#IT General Controls

Community Discussion

No community discussion yet for this question.

Full CISA Practice