nerdexam
Isaca

CISA · Question #243

Which of the following is the BEST method to maintain an audit trail of changes made to the source code of a program?

The correct answer is B. Utilize automated version control.. Automated version control systems are the best method for maintaining an audit trail of source code changes because they systematically track every modification with granular detail.

Submitted by diego_uy· Apr 18, 2026Information Systems Acquisition, Development, and Implementation

Question

Which of the following is the BEST method to maintain an audit trail of changes made to the source code of a program?

Options

  • AStandardize file naming conventions.
  • BUtilize automated version control.
  • CEmbed details within source code.
  • DDocument details on a change register.

How the community answered

(15 responses)
  • A
    7% (1)
  • B
    73% (11)
  • C
    7% (1)
  • D
    13% (2)

Why each option

Automated version control systems are the best method for maintaining an audit trail of source code changes because they systematically track every modification with granular detail.

AStandardize file naming conventions.

Standardized file naming conventions improve organization but do not provide an audit trail of changes *within* the files themselves.

BUtilize automated version control.Correct

Automated version control systems (VCS) like Git or SVN are specifically designed to track every change made to source code, including the author, timestamp, and a commit message explaining the change. This provides a comprehensive, immutable, and easily queryable audit trail essential for collaboration, rollback, and compliance.

CEmbed details within source code.

Embedding details within source code (e.g., comments) is manual, prone to error and omission, and difficult to search or enforce consistently for an audit trail.

DDocument details on a change register.

Documenting details on a change register is a manual process separate from the code itself, making it susceptible to discrepancies and not directly linked to the actual code changes, unlike an automated VCS.

Concept tested: Source code change management and audit trails

Source: https://learn.microsoft.com/en-us/azure/devops/repos/git/what-is-git?view=azure-devops

Topics

#Version control#Source code management#Audit trail#Software development best practices

Community Discussion

No community discussion yet for this question.

Full CISA Practice