CISA · Question #502
Which of the following practices is MOST helpful in preventing incidents as a result of implemented software changes?
The correct answer is C. Proposed changes are tested by stakeholders prior to implementation.. Testing proposed changes with stakeholders before implementation directly addresses the root cause of change-related incidents - undetected defects, integration failures, or unintended side effects - by validating behavior in a controlled environment before it can affect producti
Question
Which of the following practices is MOST helpful in preventing incidents as a result of implemented software changes?
Options
- APersonnel obtain senior management approval prior to implementing changes.
- BStandardized procedures are used for prompt handling of changes.
- CProposed changes are tested by stakeholders prior to implementation.
- DEvidence of successful changes are documented.
How the community answered
(35 responses)- A3% (1)
- B3% (1)
- C86% (30)
- D9% (3)
Explanation
Testing proposed changes with stakeholders before implementation directly addresses the root cause of change-related incidents - undetected defects, integration failures, or unintended side effects - by validating behavior in a controlled environment before it can affect production. A is incorrect because management approval is a governance control that authorizes changes but does nothing to verify the change will work correctly. B is incorrect because standardized procedures improve consistency and speed of handling changes, but a well-documented bad change still causes incidents. D is incorrect because documenting successful changes captures historical evidence after the fact - it informs future decisions but does not prevent current incidents.
Memory tip: Think "prevent before, not manage after" - only testing (C) occurs before the change goes live, making it the only option that can actually stop a problem from reaching production.
Topics
Community Discussion
No community discussion yet for this question.