CISA · Question #487
Which of the following would BEST help an organization maintain a configuration management system for IT inventory?
The correct answer is A. Embedding configuration management within the asset life cycle process. Embedding configuration management within the asset life cycle process ensures that configuration records are created, updated, and retired as part of the natural workflow for acquiring, modifying, and decommissioning assets - making it systematic and self-sustaining. This is…
Question
Which of the following would BEST help an organization maintain a configuration management system for IT inventory?
Options
- AEmbedding configuration management within the asset life cycle process
- BAppointing an independent person to be responsible for maintaining configuration management
- CImplementing a process for periodic review of the configuration management system
- DObtaining confirmation from change approvers to update the configuration management system
How the community answered
(31 responses)- A58% (18)
- B10% (3)
- C6% (2)
- D26% (8)
Explanation
Embedding configuration management within the asset life cycle process ensures that configuration records are created, updated, and retired as part of the natural workflow for acquiring, modifying, and decommissioning assets - making it systematic and self-sustaining. This is superior to reactive approaches. Appointing an independent person (B) creates a single point of failure. Periodic review (C) is a good compensating control but alone doesn't keep records current in real time. Confirmation from change approvers (D) helps but only covers planned changes, missing unplanned modifications or decommissions.
Topics
Community Discussion
No community discussion yet for this question.