A startup company deployed several new applications with vulnerabilities into production because security reviews were not conducted. What will BEST help to ensure effective application risk managemen

The correct answer is C. Integrate information security into existing change management.. The best solution for ensuring effective application risk management going forward is to integrate information security into the existing change management process. This ensures that security reviews and assessments are part of the workflow for all new applications or changes, pr

Submitted by naveen.iyer· Apr 18, 2026Information Security Governance

Question

A startup company deployed several new applications with vulnerabilities into production because security reviews were not conducted. What will BEST help to ensure effective application risk management going forward?

Options

AConduct automated scans on applications before deployment.
BSupplement existing development teams with security engineers.
CIntegrate information security into existing change management.
DCreate a new governance council for application security.

How the community answered

(52 responses)

A
2% (1)
B
10% (5)
C
83% (43)
D
6% (3)

Explanation

The best solution for ensuring effective application risk management going forward is to integrate information security into the existing change management process. This ensures that security reviews and assessments are part of the workflow for all new applications or changes, preventing vulnerabilities from being deployed into production. While automated scans, adding security engineers, and creating a governance council are useful, they do not provide the same systematic, integrated approach that embedding security in change management ensures for ongoing risk management.

Topics

#Application Security#Change Management#Risk Management#Security Governance

Community Discussion

No community discussion yet for this question.

Full CISM Practice