nerdexam
Isaca

CISA · Question #502

Which of the following practices is MOST helpful in preventing incidents as a result of implemented software changes?

The correct answer is C. Proposed changes are tested by stakeholders prior to implementation.. Testing proposed changes with stakeholders before implementation directly addresses the root cause of change-related incidents - undetected defects, integration failures, or unintended side effects - by validating behavior in a controlled environment before it can affect producti

Submitted by wei.xz· Apr 18, 2026Information Systems Acquisition, Development, and Implementation

Question

Which of the following practices is MOST helpful in preventing incidents as a result of implemented software changes?

Options

  • APersonnel obtain senior management approval prior to implementing changes.
  • BStandardized procedures are used for prompt handling of changes.
  • CProposed changes are tested by stakeholders prior to implementation.
  • DEvidence of successful changes are documented.

How the community answered

(35 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    86% (30)
  • D
    9% (3)

Explanation

Testing proposed changes with stakeholders before implementation directly addresses the root cause of change-related incidents - undetected defects, integration failures, or unintended side effects - by validating behavior in a controlled environment before it can affect production. A is incorrect because management approval is a governance control that authorizes changes but does nothing to verify the change will work correctly. B is incorrect because standardized procedures improve consistency and speed of handling changes, but a well-documented bad change still causes incidents. D is incorrect because documenting successful changes captures historical evidence after the fact - it informs future decisions but does not prevent current incidents.

Memory tip: Think "prevent before, not manage after" - only testing (C) occurs before the change goes live, making it the only option that can actually stop a problem from reaching production.

Topics

#Change Management#Software Testing#Incident Prevention#Quality Assurance

Community Discussion

No community discussion yet for this question.

Full CISA Practice