CISA · Question #213
Which of the following is the MOST appropriate team to verify that system changes deployed through a continuous integration/continuous development (CI/CD) pipeline are tested and implemented in a…
The correct answer is D. Quality assurance (QA). Quality Assurance (QA) is the correct answer because QA's core mandate is to independently verify that changes meet defined standards, are properly tested, and follow controlled release processes - making them the natural oversight body for CI/CD pipelines. Database…
Question
Which of the following is the MOST appropriate team to verify that system changes deployed through a continuous integration/continuous development (CI/CD) pipeline are tested and implemented in a controlled manner?
Options
- ADatabase administration
- BLegal and regulatory compliance
- CSoftware development
- DQuality assurance (QA)
How the community answered
(55 responses)- A13% (7)
- B5% (3)
- C4% (2)
- D78% (43)
Explanation
Quality Assurance (QA) is the correct answer because QA's core mandate is to independently verify that changes meet defined standards, are properly tested, and follow controlled release processes - making them the natural oversight body for CI/CD pipelines. Database administration (A) manages data storage and schemas, not the governance of deployment processes. Legal and regulatory compliance (B) sets policy and ensures regulatory adherence at a higher level, but does not actively validate deployment testing procedures. Software development (C) writes and deploys the code, creating a conflict of interest - they cannot objectively verify their own changes are "controlled."
Memory tip: Think of QA as the "gatekeeper" between development and production. In any change management question, when you see words like tested, controlled, or verified, QA is almost always the answer - they own the validation function, not the build function.
Topics
Community Discussion
No community discussion yet for this question.