Which of the following would be the BEST way to reduce the risk of disruption resulting from an emergency system change?

The correct answer is B. Confirm rollback plans are in place. Confirming rollback plans are in place is the BEST risk mitigation because emergency changes are implemented quickly with limited testing, increasing the probability of failure. A rollback plan ensures the organization can restore the previous state rapidly if the change causes…

Submitted by eva_at· Apr 18, 2026Information Security Risk Management

Question

Options

ANotify users affected by the change.
BConfirm rollback plans are in place.
CVerify the change request has been approved.
DConfirm the change implementation is scheduled.

How the community answered

(49 responses)

A
4% (2)
B
71% (35)
C
16% (8)
D
8% (4)

Explanation

Confirming rollback plans are in place is the BEST risk mitigation because emergency changes are implemented quickly with limited testing, increasing the probability of failure. A rollback plan ensures the organization can restore the previous state rapidly if the change causes disruption, directly limiting the impact. Notifying users (A) manages communication but does not reduce technical risk. Verifying change approval (C) is a governance step that should already be completed before implementation. Scheduling the change (D) optimizes timing but does not reduce the inherent technical risk - only a tested rollback plan does that.

Topics

#Change Management#Risk Mitigation#Incident Response#Rollback Planning

Community Discussion

No community discussion yet for this question.

Full CISM Practice