CISA · Question #243
Which of the following is the BEST method to maintain an audit trail of changes made to the source code of a program?
The correct answer is B. Utilize automated version control.. Automated version control systems are the best method for maintaining an audit trail of source code changes because they systematically track every modification with granular detail.
Question
Which of the following is the BEST method to maintain an audit trail of changes made to the source code of a program?
Options
- AStandardize file naming conventions.
- BUtilize automated version control.
- CEmbed details within source code.
- DDocument details on a change register.
How the community answered
(15 responses)- A7% (1)
- B73% (11)
- C7% (1)
- D13% (2)
Why each option
Automated version control systems are the best method for maintaining an audit trail of source code changes because they systematically track every modification with granular detail.
Standardized file naming conventions improve organization but do not provide an audit trail of changes *within* the files themselves.
Automated version control systems (VCS) like Git or SVN are specifically designed to track every change made to source code, including the author, timestamp, and a commit message explaining the change. This provides a comprehensive, immutable, and easily queryable audit trail essential for collaboration, rollback, and compliance.
Embedding details within source code (e.g., comments) is manual, prone to error and omission, and difficult to search or enforce consistently for an audit trail.
Documenting details on a change register is a manual process separate from the code itself, making it susceptible to discrepancies and not directly linked to the actual code changes, unlike an automated VCS.
Concept tested: Source code change management and audit trails
Source: https://learn.microsoft.com/en-us/azure/devops/repos/git/what-is-git?view=azure-devops
Topics
Community Discussion
No community discussion yet for this question.