An organization has been struggling with unsuccessful change rollbacks due to unreliable images. Which of the following would be an IS auditor's BEST recommendation in this situation?

The correct answer is B. Implement an approved baseline build. Unreliable images used for rollbacks indicate the absence of a controlled, verified baseline. Implementing an approved baseline build establishes a known-good, tested, and authorized system configuration that can be reliably restored during a rollback. This directly addresses…

Submitted by kwame.gh· Apr 18, 2026Information Systems Operations and Business Resilience

Question

An organization has been struggling with unsuccessful change rollbacks due to unreliable images. Which of the following would be an IS auditor’s BEST recommendation in this situation?

Options

AImplement additional approvals for future releases
BImplement an approved baseline build
CImplement an approved continuous integration model
DImplement tiered incident response procedures

How the community answered

(50 responses)

A
8% (4)
B
78% (39)
C
10% (5)
D
4% (2)

Explanation

Unreliable images used for rollbacks indicate the absence of a controlled, verified baseline. Implementing an approved baseline build establishes a known-good, tested, and authorized system configuration that can be reliably restored during a rollback. This directly addresses the root cause of the problem. Additional approvals (A) add governance overhead but do not fix image reliability. A continuous integration model (C) improves development pipelines but does not inherently solve rollback image reliability. Tiered incident response (D) improves how incidents are managed but does not resolve the underlying cause of failed rollbacks.

Topics

#Change Management#Configuration Management#System Reliability#IT Operations

Community Discussion

No community discussion yet for this question.

Full CISA Practice